What is CVE-2026-57825?

CVE-2026-57825 is a medium-severity vulnerability in Ocaml Opam, classified under UNIX Symbolic Link (Symlink) Following. CVSS score: 5.7/10. Published 2026-09-09.

How severe is CVE-2026-57825?

Medium severity. CVSS v3 base score is 5.7 out of 10.

Vulnerability in Ocaml Opam

CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.

CVSS v3 metric

CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N.

Affected products

Ocaml Opam

Weakness classification (CWE)

CWE-61 — UNIX Symbolic Link (Symlink) Following

References

cve@mitre.org
cve@mitre.org
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2026-57825?: CVE-2026-57825 is a medium-severity vulnerability in Ocaml Opam, classified under UNIX Symbolic Link (Symlink) Following. CVSS score: 5.7/10. Published 2026-09-09.
How severe is CVE-2026-57825?: Medium severity. CVSS v3 base score is 5.7 out of 10.