---
id: CVE-2026-13346
title: >-
  pip: pip: Arbitrary file installation via malicious package indexes
  (CVE-2026-13346)
summary: >-
  A flaw was found in pip. When processing doubly-encoded package URLs from
  malicious package indexes, pip incorrectly handles the file paths. A remote
  attacker could exploit this by convincing a user to download or install a
  package from su…
severity: medium
cvss: 5.9
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L'
cvssSource: vendor
cwe: CWE-22
vendor: Red Hat
product: Red Hat Hardened Images
affected:
  - enterprise_linux 10
  - enterprise_linux 7
  - enterprise_linux 8
  - enterprise_linux 9
  - openshift_container_platform 4
  - ai_inference_server 3.5
  - hardened_images
patched:
  - ai_inference_server 3.5
  - hardened_images
published: '2026-07-29'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T02:37:23+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13346.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13346.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-13346'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2508514'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-13346'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-13346'
  - url: 'https://github.com/pypa/pip/pull/14110'
  - url: >-
      https://mail.python.org/archives/list/security-announce@python.org/thread/L2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX/
  - url: 'https://access.redhat.com/errata/RHSA-2026:82415'
  - url: 'https://access.redhat.com/errata/RHSA-2026:82368'
  - url: 'https://access.redhat.com/errata/RHSA-2026:82061'
  - url: 'https://access.redhat.com/errata/RHSA-2026:48788'
  - url: 'http://www.openwall.com/lists/oss-security/2026/07/29/7'
  - url: 'https://github.com/advisories/GHSA-qwm4-qh6w-59xr'
  - url: >-
      https://github.com/pypa/pip/commit/10dfb6b9005484578b386f64b9f36982e3dc6679
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/pip/PYSEC-2026-3721.yaml
  - url: 'https://github.com/pypa/pip'
  - url: >-
      https://mail.python.org/archives/list/security-announce@python.org/thread/L2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX
tags:
  - csaf
  - vex
  - red-hat
  - osv
  - pip
epss: 0.00292
epssPercentile: 0.21672
aliases:
  - PYSEC-2026-3721
  - GHSA-qwm4-qh6w-59xr
ecosystem: pip
scores:
  vendor: 5.9
  osv: 6.5
ingestedAt: '2026-08-21T19:23:48.291Z'
---

## Overview

A flaw was found in pip. When processing doubly-encoded package URLs from malicious package indexes, pip incorrectly handles the file paths. A remote attacker could exploit this by convincing a user to download or install a package from such an index. This could allow for files to be installed to arbitrary locations on the system, potentially leading to system compromise. This vulnerability primarily affects users utilizing the `pip download` command with the `--only-binary` option.

## Vendor advisories

- **RHSA-2026:82415** · Red Hat · fixed in: Red Hat AI Inference Server 3.5 · released 2026-10-13 · [advisory](https://access.redhat.com/errata/RHSA-2026:82415)
- **RHSA-2026:82368** · Red Hat · fixed in: Red Hat AI Inference Server 3.5 · released 2026-10-13 · [advisory](https://access.redhat.com/errata/RHSA-2026:82368)
- **RHSA-2026:82061** · Red Hat · fixed in: Red Hat AI Inference Server 3.5 · released 2026-10-13 · [advisory](https://access.redhat.com/errata/RHSA-2026:82061)
- **RHSA-2026:48788** · Red Hat · fixed in: Red Hat Hardened Images · released 2026-07-30 · [advisory](https://access.redhat.com/errata/RHSA-2026:48788)
- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, … · updated 2026-10-14 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13346.json)

**pip: pip: Arbitrary file installation via malicious package indexes** — rated Moderate by Red Hat. Released 2026-07-29, updated 2026-10-14.

Affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4

Fixed:

- Red Hat AI Inference Server 3.5
- Red Hat Hardened Images

No fix planned:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4

## Remediation

For more information visit https://access.redhat.com/errata/RHSA-2026:82415 https://access.redhat.com/errata/RHSA-2026:82415
For more information visit https://access.redhat.com/errata/RHSA-2026:82368 https://access.redhat.com/errata/RHSA-2026:82368
For more information visit https://access.redhat.com/errata/RHSA-2026:82061 https://access.redhat.com/errata/RHSA-2026:82061

## Package advisory (CVE-2026-13346)

Affected packages:

- `pip < 26.2`

Patched in:

- `pip 26.2`

Source: https://osv.dev/vulnerability/PYSEC-2026-3721