A vulnerability identified as problematic has been detected in OCaml opam up to 2.5.0. Affected is an unknown function of the component Destination Handler. This manipulation of the argument install causes path traversal: ‘../filedir’.

This vulnerability is handled as CVE-2026-41082. It is possible to launch the attack on the local host. There is not any exploit available.

You should upgrade the affected component.