CVE-2026-24049High· 7.1▾ Twilight

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after e…

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score39/ 100 · Low

impact 39.1 · likelihood 0.1 · exploitation 0

🔒

Full detail requires an account

The latest CVEs are free to read. CVE-2026-24049 is outside the free window — sign in (free) to view the full technical detail, affected versions, references, and raw markdown.