---
id: CVE-2023-5752
aliases:
  - GHSA-mq26-g339-26xf
  - PYSEC-2023-228
title: Command Injection in pip when used with Mercurial
summary: Command Injection in pip when used with Mercurial
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'
vendor: pip
product: pip
ecosystem: pip
affected:
  - pip < 23.3
patched:
  - pip 23.3
published: '2023-10-25'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T03:50:03.949904915Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-mq26-g339-26xf'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2023-5752'
  - url: 'https://github.com/pypa/pip/pull/12306'
  - url: >-
      https://github.com/pypa/pip/commit/389cb799d0da9a840749fcd14878928467ed49b4
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/pip/PYSEC-2023-228.yaml
  - url: 'https://github.com/pypa/pip'
  - url: 'https://lists.debian.org/debian-lts-announce/2025/10/msg00028.html'
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/622OZXWG72ISQPLM5Y57YCVIMWHD4C3U
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/65UKKF5LBHEFDCUSPBHUN4IHYX7SRMHH
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXUVMJM25PUAZRQZBF54OFVKTY3MINPW
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KFC2SPFG5FLCZBYY2K3T5MFW2D22NG6E
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YBSB3SUPQ3VIFYUMHPO3MEQI4BJAXKCZ
  - url: >-
      https://mail.python.org/archives/list/security-announce@python.org/thread/F4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL
tags:
  - osv
  - pip
epss: 0.00476
epssPercentile: 0.403
ingestedAt: '2026-09-12T03:13:01.711Z'
---

## Overview

When installing a package from a Mercurial VCS URL, e.g. `pip install hg+...`, with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the `hg clone` call (e.g. `--config`). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.

## Affected packages

- `pip < 23.3`

## Remediation

Upgrade to a patched release:

- `pip 23.3`