# CVE-2026-68939

## Summary

- **CVE ID:** CVE-2026-68939
- **Severity:** LOW
- **CVSS Score:** 2 (CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)
- **CWE:** CWE-78, CWE-88, CWE-155
- **Published:** Aug 18, 2026
- **Last Modified:** Aug 18, 2026

## Description

Pyenv provides simple Python version management. Prior to 2.8.0, is_version_safe() in libexec/pyenv-version-file-read accepts shell glob metacharacters in .python-version values, and unquoted PYENV_VERSION expansion in libexec/pyenv-version-name, libexec/pyenv-which, libexec/pyenv-prefix, libexec/pyenv-local, libexec/pyenv-global, libexec/pyenv-version, and libexec/pyenv-versions pathname-expands the value against the current directory, allowing a matching attacker-controlled file to silently select a different installed interpreter or version. This issue is fixed in version 2.8.0.

## Affected Products

- pyenv — pyenv (< 2.8.0)

## References

- [CNA](https://github.com/pyenv/pyenv/security/advisories/GHSA-g478-f579-9vp9)
- [CNA](https://github.com/pyenv/pyenv/commit/95df7dbc7b34595b47c9b922de198547effda819)
- [CNA](https://github.com/pyenv/pyenv/releases/tag/v2.8.0)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.17%
- **EPSS Percentile:** 6.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._