Is CVE-2026-41958 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-41958?

CVE-2026-41958 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-41958

Description

A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability.