---
id: CVE-2026-13346
aliases:
  - PYSEC-2026-3721
  - GHSA-qwm4-qh6w-59xr
title: >-
  pip would incorrectly handle doubly-encoded package URLs from indexes allowing
  for files to be installed to arbitrary locations on disk e…
summary: >-
  pip would incorrectly handle doubly-encoded package URLs from indexes allowing
  for files to be installed to arbitrary locations on disk even when installing
  wheels.





  This vulnerability requires downloading or installing a package from…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
vendor: pip
product: pip
ecosystem: pip
affected:
  - pip < 26.2
patched:
  - pip 26.2
published: '2026-07-29'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T11:15:08.939447160Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/PYSEC-2026-3721'
references:
  - url: 'http://www.openwall.com/lists/oss-security/2026/07/29/7'
  - url: >-
      https://mail.python.org/archives/list/security-announce@python.org/thread/L2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX/
  - url: 'https://github.com/pypa/pip/pull/14110'
  - url: 'https://github.com/advisories/GHSA-qwm4-qh6w-59xr'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-13346'
  - url: >-
      https://github.com/pypa/pip/commit/10dfb6b9005484578b386f64b9f36982e3dc6679
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/pip/PYSEC-2026-3721.yaml
  - url: 'https://github.com/pypa/pip'
  - url: >-
      https://mail.python.org/archives/list/security-announce@python.org/thread/L2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX
tags:
  - osv
  - pip
epss: 0.00292
epssPercentile: 0.19361
ingestedAt: '2026-08-21T19:23:48.291Z'
---

## Overview

pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.




This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone are not able to exploit this vulnerability. Note that this vulnerability only materially impacts users running `pip download` with the `--only-binary` option as installing source distributions from an untrusted index is already an unsafe operation that executes code during install time.

## Affected packages

- `pip < 26.2`

## Remediation

Upgrade to a patched release:

- `pip 26.2`