Is CVE-2026-57825 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-57825?

CVE-2026-57825 has a CVSS v3 severity of MEDIUM (5.7).

Back

CVE-2026-57825

Description

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.