CVE-2026-13346Medium· 6.5▾ Sunlitpip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. This vulnerability requires downloading or installing a package from…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 21.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
0.3%
Last analysed / modified upstream
pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.
This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone are not able to exploit this vulnerability. Note that this vulnerability only materially impacts users running pip download with the --only-binary option as installing source distributions from an untrusted index is already an unsafe operation that executes code during install time.
pip < 26.2Upgrade to a patched release:
pip 26.2Connected by shared product, vendor, weakness, or advisory.
CVE-2023-5752Medium· 5.5Command Injection in pip when used with Mercurial
CVE-2026-3219Mediumpip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files
CVE-2026-1703Lowpip Path Traversal vulnerability
CVE-2025-8869Mediumpip's fallback tar extraction doesn't check symbolic links point to extraction directory
CVE-2026-8643Medium· 5.5pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.
CVE-2021-3572Medium· 5.7A flaw was found in python-pip in the way it handled Unicode separators in git references