CVE-2026-13346
published 2026-07-29CVE-2026-13346: pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing…
PriorityP338medium6.5CVSS 3.1
AVNACLPRNUIRSUCNIHAN
EPSS
0.29%
20.7th percentile
pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.
This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone are not able to exploit this vulnerability. Note that this vulnerability only materially impacts users running `pip download` with the `--only-binary` option as installing source distributions from an untrusted index is already an unsafe operation that executes code during install time.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | python-pip | — | — |
| pypa | pip | < 26.2 | 26.2 |
| pypa | pip | >= 0 < 26.2.0 | 26.2.0 |
| python_packaging_authority | pip | < 26.2 | 26.2 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv4.05.6MEDIUMCVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_redhat5.6MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
pip would incorrectly handle doubly-encoded package URLs from indexes
ghsa·2026-07-29
CVE-2026-13346 [MEDIUM] CWE-36 pip would incorrectly handle doubly-encoded package URLs from indexes
pip would incorrectly handle doubly-encoded package URLs from indexes
pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.
This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone are not able to exploit this vulnerability. Note that this vulnerability only materially impacts users running `pip download` with the `--only-binary` option as installing source distributions from an untrusted index is already an unsafe operation that executes code during install time.
GHSA
pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.
ghsa_unreviewed·2026-07-29
CVE-2026-13346 [MEDIUM] CWE-36 pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.
pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.
This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone are not able to exploit this vulnerability. Note that this vulnerability only materially impacts users running `pip download` with the `--only-binary` option as installing source distributions from an untrusted index is already an unsafe operation that executes code during install time.
VulDB
Python Packaging Authority pip up to 26.1 path traversal
vuldb·2026-07-29·CVSS 5.6
CVE-2026-13346 [MEDIUM] Python Packaging Authority pip up to 26.1 path traversal
A vulnerability classified as critical was found in Python Packaging Authority pip up to 26.1. This vulnerability affects unknown code. Executing a manipulation can lead to path traversal.
The identification of this vulnerability is CVE-2026-13346. The attack may be launched remotely. There is no exploit available.
Upgrading the affected component is advised.
Red Hat
pip: pip: Arbitrary file installation via malicious package indexes
vendor_redhat·2026-07-29·CVSS 5.6
CVE-2026-13346 [MEDIUM] CWE-22 pip: pip: Arbitrary file installation via malicious package indexes
pip: pip: Arbitrary file installation via malicious package indexes
A flaw was found in pip. When processing doubly-encoded package URLs from malicious package indexes, pip incorrectly handles the file paths. A remote attacker could exploit this by convincing a user to download or install a package from such an index. This could allow for files to be installed to arbitrary locations on the system, potentially leading to system compromise. This vulnerability primarily affects users utilizing the `pip download` command with the `--only-binary` option.
Statement: Note that this vulnerability only materially impacts users running pip download with the --only-binary option as installing source distributions from an untrusted index is already an unsafe operation that executes code during insta
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-13346 mingw-python-pip: pip: Arbitrary file installation via malicious package indexes [fedora-all]
bugzilla·2026-07-30·CVSS 5.6
CVE-2026-13346 [MEDIUM] CVE-2026-13346 mingw-python-pip: pip: Arbitrary file installation via malicious package indexes [fedora-all]
CVE-2026-13346 mingw-python-pip: pip: Arbitrary file installation via malicious package indexes [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.
This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone are not able to exploit this vulnerability. Note that this vulnerability only materially impacts users running `pip download` with the `--only-binary` option as insta
Bugzilla
CVE-2026-13346 python-pip: pip: Arbitrary file installation via malicious package indexes [fedora-all]
bugzilla·2026-07-30·CVSS 5.6
CVE-2026-13346 [MEDIUM] CVE-2026-13346 python-pip: pip: Arbitrary file installation via malicious package indexes [fedora-all]
CVE-2026-13346 python-pip: pip: Arbitrary file installation via malicious package indexes [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.
This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone are not able to exploit this vulnerability. Note that this vulnerability only materially impacts users running `pip download` with the `--only-binary` option as installing
Bugzilla
CVE-2026-13346 pip: pip: Arbitrary file installation via malicious package indexes
bugzilla·2026-07-29·CVSS 5.6
CVE-2026-13346 [MEDIUM] CVE-2026-13346 pip: pip: Arbitrary file installation via malicious package indexes
CVE-2026-13346 pip: pip: Arbitrary file installation via malicious package indexes
pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.
This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone are not able to exploit this vulnerability. Note that this vulnerability only materially impacts users running `pip download` with the `--only-binary` option as installing source distributions from an untrusted index is already an unsafe operation that executes code during install time.
2026-07-29
Published