CVE-2026-104843Medium· 5.9▾ Sunlituv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 4.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.4%
uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory already present on the user's PATH. Non-Windows hosts are not affected. This issue is fixed in version 0.12.18.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
uv >= 0.12.7, < 0.12.18uv >= 0.12.7, < 0.12.18Patched in:
uv 0.12.18uv 0.12.18Connected by shared product, vendor, weakness, or advisory.
CVE-2026-114109High· 8.8uv before 0.11.15 Arbitrary File Write via Entry Point Names
CVE-2026-114110Low· 5.3uv vulnerable to arbitrary file deletion through RECORD entries
PYSEC-2026-4321Noneuv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
GHSA-hq85-5cpj-mr62Criticaluv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
GHSA-pjjw-68hj-v9mwLowuv vulnerable to arbitrary file deletion through RECORD entries
CVE-2025-54368Mediumuv allows ZIP payload obfuscation through parsing differentials