CVE-2026-23986

CVE-2026-23986 is a high-severity vulnerability affecting the Copier library and CLI tool prior to version 9.11.2. This flaw allows a malicious template to write to arbitrary directories outside the intended destination path, even when the template is considered "safe," by leveraging directory symlinks and a specific configuration. The vulnerability has a CVSS score of 7.1 (HIGH), indicating that an attacker could achieve high integrity and availability impacts with low attack complexity, though user interaction is required. There is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or media coverage, but it has garnered significant community discussion with 10 mentions.