TI-2025-43946 Aliases CVE-2025-71437

Path traversal in Astral uv sdist extraction allows file writes

MEDIUM 44CWE-22Published 2026-10-21 · Updated 2026-10-21

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Deferred Red Hat: fix deferred

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-22 and the CVSS impact.

Summary

Astral uv through 0.8.21 is affected. A path traversal flaw in source distribution (sdist) tar extraction (CWE-22) lets a crafted sequence of symlinks redirect file writes outside the intended extraction prefix. An attacker who publishes a malicious sdist can write arbitrary files outside the installation prefix when a victim installs it.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allows a specially crafted sequence of symlinks to redirect file writes outside the intended extraction prefix. Attackers can publish a malicious sdist that, when installed by a victim, writes arbitrary files to filesystem locations outside the installation prefix.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00339 27th percentileScored 2026-11-07

Fix Deferred Red Hat: fix deferred

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
astral-sh	uv	up to 0.8.21	—	No fix listed	CNA

uv Vendorastral-sh Affected up to 0.8.21 Fixed in — No fix listed CNA

Remediation

The sources list no fixed version for uv. Red Hat lists Lightspeed Core, Lightspeed Services for Advanced Cluster Management, OpenShift Lightspeed, Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3 and other products as affected with no fix available.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Lightspeed Core	Affected	No fix yet: Fix deferred
Lightspeed Services for Advanced Cluster Management	Affected	No fix yet: Fix deferred
OpenShift Lightspeed	Affected	No fix yet: Fix deferred
Red Hat AI Inference Server	Affected	No fix yet: Fix deferred
Red Hat Enterprise Linux AI (RHEL AI) 3	Affected	No fix yet: Fix deferred
Red Hat OpenShift AI (RHOAI)	Affected	No fix yet: Fix deferred

Timeline

2026-10-21 Threatist record created from CVE-2025-71437
2026-10-21 CISA SSVC decision points changed
2026-10-22 Affected versions changed · Red Hat
2026-10-22 CVSS score added · Red Hat

References

Advisory 1

GitHub Security Advisory (GHSA-7j9j-68r2-f35q)

TI-2025-38758 astral-tokio-tar Vulnerable to PAX Header Desynchronization CVSS 3.1HIGH 8.1
TI-2026-78723 Path traversal in Astral uv lets attackers delete arbitrary files CVSS 4.0HIGH 8.7
TI-2026-78722 Path traversal in uv lets malicious wheels write files CVSS 4.0HIGH 8.7
TI-2025-34180 uv is vulnerable to ZIP payload obfuscation through parsing differentials CVSS 4.0MEDIUM 6.8
TI-2026-66129 uv: Path traversal on Windows through wheel extraction CVSS 4.0MEDIUM 5.9
TI-2025-37264 astral-tokio-tar has a path traversal in tar extraction CVSS 4.0MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences