CVE-2026-13346Medium· 5.9▾ SunlitA flaw was found in pip. When processing doubly-encoded package URLs from malicious package indexes, pip incorrectly handles the file paths. A remote attacker could exploit this by convincing a user to download or install a package from su…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 21.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.3%
Last analysed / modified upstream
6.5 → 5.9
A flaw was found in pip. When processing doubly-encoded package URLs from malicious package indexes, pip incorrectly handles the file paths. A remote attacker could exploit this by convincing a user to download or install a package from such an index. This could allow for files to be installed to arbitrary locations on the system, potentially leading to system compromise. This vulnerability primarily affects users utilizing the pip download command with the --only-binary option.
pip: pip: Arbitrary file installation via malicious package indexes — rated Moderate by Red Hat. Released 2026-07-29, updated 2026-10-14.
Affected:
Fixed:
No fix planned:
For more information visit https://access.redhat.com/errata/RHSA-2026:82415 https://access.redhat.com/errata/RHSA-2026:82415 For more information visit https://access.redhat.com/errata/RHSA-2026:82368 https://access.redhat.com/errata/RHSA-2026:82368 For more information visit https://access.redhat.com/errata/RHSA-2026:82061 https://access.redhat.com/errata/RHSA-2026:82061
Affected packages:
pip < 26.2Patched in:
pip 26.2Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-44301High· 7.3hugo: Hugo: Arbitrary file read/write via unrestricted file system access in Node-based asset pipelines (CVE-2026-44301)
CVE-2026-114140High· 7.8nbconvert: nbconvert: arbitrary file write via path traversal in ExtractOutputPreprocessor (CVE-2026-114140)
CVE-2026-66053Medium· 5.9thrift: Apache Thrift Python bindings: Information disclosure due to improper certificate validation (CVE-2026-66053)
CVE-2026-43871High· 7.5thrift: Apache Thrift: Denial of Service via infinite loop (CVE-2026-43871)
CVE-2026-69153High· 7.5postcss: PostCSS: Information disclosure via crafted sourceMappingURL (CVE-2026-69153)
CVE-2026-59890Medium· 6.1setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) (CVE-2026-59890)