{"id":"CVE-2026-13346","title":"pip: pip: Arbitrary file installation via malicious package indexes (CVE-2026-13346)","summary":"A flaw was found in pip. When processing doubly-encoded package URLs from malicious package indexes, pip incorrectly handles the file paths. A remote attacker could exploit this by convincing a user to download or install a package from su…","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L","cvssSource":"vendor","cwe":"CWE-22","vendor":"Red Hat","product":"Red Hat Hardened Images","affected":["enterprise_linux 10","enterprise_linux 7","enterprise_linux 8","enterprise_linux 9","openshift_container_platform 4","ai_inference_server 3.5","hardened_images"],"patched":["ai_inference_server 3.5","hardened_images"],"published":"2026-07-29","updated":"2026-10-14","sourceUpdated":"2026-10-14T02:37:23+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13346.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13346.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-13346"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2508514"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-13346"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13346"},{"url":"https://github.com/pypa/pip/pull/14110"},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/L2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX/"},{"url":"https://access.redhat.com/errata/RHSA-2026:82415"},{"url":"https://access.redhat.com/errata/RHSA-2026:82368"},{"url":"https://access.redhat.com/errata/RHSA-2026:82061"},{"url":"https://access.redhat.com/errata/RHSA-2026:48788"},{"url":"http://www.openwall.com/lists/oss-security/2026/07/29/7"},{"url":"https://github.com/advisories/GHSA-qwm4-qh6w-59xr"},{"url":"https://github.com/pypa/pip/commit/10dfb6b9005484578b386f64b9f36982e3dc6679"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/pip/PYSEC-2026-3721.yaml"},{"url":"https://github.com/pypa/pip"},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/L2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX"}],"tags":["csaf","vex","red-hat","osv","pip"],"epss":0.00292,"epssPercentile":0.21672,"aliases":["PYSEC-2026-3721","GHSA-qwm4-qh6w-59xr"],"ecosystem":"pip","scores":{"vendor":5.9,"osv":6.5},"ingestedAt":"2026-08-21T19:23:48.291Z","slug":"CVE-2026-13346","body":"## Overview\n\nA flaw was found in pip. When processing doubly-encoded package URLs from malicious package indexes, pip incorrectly handles the file paths. A remote attacker could exploit this by convincing a user to download or install a package from such an index. This could allow for files to be installed to arbitrary locations on the system, potentially leading to system compromise. This vulnerability primarily affects users utilizing the `pip download` command with the `--only-binary` option.\n\n## Vendor advisories\n\n- **RHSA-2026:82415** · Red Hat · fixed in: Red Hat AI Inference Server 3.5 · released 2026-10-13 · [advisory](https://access.redhat.com/errata/RHSA-2026:82415)\n- **RHSA-2026:82368** · Red Hat · fixed in: Red Hat AI Inference Server 3.5 · released 2026-10-13 · [advisory](https://access.redhat.com/errata/RHSA-2026:82368)\n- **RHSA-2026:82061** · Red Hat · fixed in: Red Hat AI Inference Server 3.5 · released 2026-10-13 · [advisory](https://access.redhat.com/errata/RHSA-2026:82061)\n- **RHSA-2026:48788** · Red Hat · fixed in: Red Hat Hardened Images · released 2026-07-30 · [advisory](https://access.redhat.com/errata/RHSA-2026:48788)\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, … · updated 2026-10-14 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13346.json)\n\n**pip: pip: Arbitrary file installation via malicious package indexes** — rated Moderate by Red Hat. Released 2026-07-29, updated 2026-10-14.\n\nAffected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\nFixed:\n\n- Red Hat AI Inference Server 3.5\n- Red Hat Hardened Images\n\nNo fix planned:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\n## Remediation\n\nFor more information visit https://access.redhat.com/errata/RHSA-2026:82415 https://access.redhat.com/errata/RHSA-2026:82415\nFor more information visit https://access.redhat.com/errata/RHSA-2026:82368 https://access.redhat.com/errata/RHSA-2026:82368\nFor more information visit https://access.redhat.com/errata/RHSA-2026:82061 https://access.redhat.com/errata/RHSA-2026:82061\n\n## Package advisory (CVE-2026-13346)\n\nAffected packages:\n\n- `pip < 26.2`\n\nPatched in:\n\n- `pip 26.2`\n\nSource: https://osv.dev/vulnerability/PYSEC-2026-3721","depth":"sunlit","depthScore":33,"depthScoreParts":{"impact":32.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":220028,"id":"CVE-2026-13346","ts":1791978506745,"field":"cvss","old":"6.5","new":"5.9"}]}