Answer in brief
CVE-2026-128079 records a Medium severity (CVSS 6.8) vulnerability in envd: Host file disclosure through requirements path traversal and TOCTOU. The current sources do not mark it as known exploited. The current feed maps tensorchord/envd (generic), envd (pip), envd (pypi). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 6.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps tensorchord/envd (generic), envd (pip), envd (pypi). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| tensorchord/envdgeneric | >=0.3.38 <1.3.6 | 1.3.6 |
| envdpip | >=0.3.38,<1.3.6 | 1.3.6 |
| envdpypi | >=0.3.38 <1.3.6 | 1.3.6 |
Published upstream
Nov 13, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 13, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 13, 2026
envd provides reproducible development environments for humans and agents. In versions starting with 0.3.38 and before 1.3.6, insufficient containment of host-side requirements-file reads in install.python_packages(requirements=...) could allow access to files outside the build context. An attacker able to influence build input could cause file contents interpreted as dependency entries to appear in debug logs or build-step metadata, subject to the envd process’s permissions. Exploitation in version 1.3.5 additionally requires concurrent modification of relevant filesystem paths. This issue is fixed in version 1.3.6.
Quoted source text, attributed separately from HOL analysis.