Limited path traversal when installing wheel archives
Priority LOW 11CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Active
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- Partial Red Hat: 2 fixed, 20 without a fix
Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat.
Summary
When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00436 38th percentileScored 2026-11-07
Fix Partial pip (Python Packaging Authority): 26.0pip (PyPI): 26.0Red Hat: 6 advisoriesRed Hat: 2 fixed, 20 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Python Packaging Authority | pip | before 26.0 | 26.0 | Patch available | CNA |
| — | pip (PyPI) | before 26.0 | 26.0 | Patch available | GHSA-6vgw-5pg2-w6jp |
- pip VendorPython Packaging Authority Affected before 26.0 Fixed in 26.0 Patch available CNA
- pip (PyPI) Vendor— Affected before 26.0 Fixed in 26.0 Patch available GHSA-6vgw-5pg2-w6jp
Remediation
- Fix · CNA pip (Python Packaging Authority) Fixed in 26.0
- Fix · GHSA-6vgw-5pg2-w6jp pip (PyPI) Fixed in 26.0 Advisory →
Red Hat 6 advisories
- RHSA-2026:94476 Released 2026-11-03 · Red Hat rating CriticalRed Hat AI Base Images 3.0.8 (CUDA)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
- RHSA-2026:94459 Released 2026-11-03 · Red Hat rating CriticalRed Hat AI Base Images 3.0.8 (CPU)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:91236 Released 2026-10-27 · Red Hat rating CriticalRed Hat AI Base Images 3.0.7 (CUDA)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
Show 3 more Red Hat advisories
- RHSA-2026:91232 Released 2026-10-27 · Red Hat rating CriticalRed Hat AI Base Images 3.0.7 (CPU)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:91219 Released 2026-10-27 · Red Hat rating CriticalRed Hat AI Base Images 3.0.7 (ROCm)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-rocm-rhel9
- RHSA-2026:7610 Released 2026-04-10 · Red Hat rating LowRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images python-pip-26.0.1-2.1.hum1@src, python-pip-wheel-26.0.1-2.1.hum1@noarch@public-hummingbird-aarch64-rpms, python-pip-wheel-26.0.1-2.1.hum1@noarch@public-hummingbird-x86_64-rpms
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Lightspeed Core | Affected | No fix yet: Fix deferred |
| Logging Subsystem for Red Hat OpenShift | Affected | No fix yet: Fix deferred |
| Migration Toolkit for Virtualization | Affected | No fix yet: Fix deferred |
| OpenShift Lightspeed | Affected | No fix yet: Fix deferred |
| OpenShift Service Mesh 3 | Affected | No fix yet: Fix deferred |
| Pen Drive Powered by Red Hat Lightspeed | Affected | No fix yet: Fix deferred |
| Red Hat AI Inference Server | Affected | No fix yet: Fix deferred |
| Red Hat Ansible Automation Platform 2 | Affected | No fix yet: Fix deferred |
| Red Hat Discovery 2 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 10 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 8 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 9 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Dev Spaces | Affected | No fix yet: Fix deferred |
| Red Hat Quay 3 | Affected | No fix yet: Fix deferred |
| Red Hat Satellite 6 | Affected | No fix yet: Fix deferred |
| Red Hat Trusted Artifact Signer | Affected | No fix yet: Fix deferred |
| Service Telemetry Framework 1.5 | Affected | No fix yet: Fix deferred |
| Red Hat Hardened Images | Fixed | RHSA-2026:7610 |
| Red Hat OpenShift AI 3.0 | Fixed | RHSA-2026:91219, RHSA-2026:91232, RHSA-2026:91236, RHSA-2026:94459, RHSA-2026:94476 |
Not affected: 1 product
- Red Hat Hardened Images
Timeline
- 2026-10-02 Threatist record created from CVE-2026-1703
- 2026-10-03 Alias added: GHSA-6vgw-5pg2-w6jp
- 2026-10-16 Affected versions changed · Red Hat
- 2026-10-30 Fix available: RHSA-2026:91219 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:91232 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:91236 · Red Hat
- 2026-10-30 Fix available: Red Hat OpenShift AI 3.0 · Red Hat
- 2026-11-03 Fix available: RHSA-2026:94459 · Red Hat
- 2026-11-03 Affected versions changed · Red Hat
- 2026-11-04 Fix available: RHSA-2026:94476 · Red Hat
- 2026-11-04 Affected versions changed · Red Hat
References
Patch 2
Advisory 2
More Python Packaging Authority vulnerabilities
- TI-2025-08119 Fallback tar extraction in pip doesn't check symbolic links point to extraction directory CVSS 4.0MEDIUM 5.9
- TI-2026-02782 pip doesn't reject concatenated ZIP and tar archives CVSS 4.0MEDIUM 4.6
Sources
- CVE-2026-1703 · CVE Program
- CVE-2026-1703 · NVD
- FIRST EPSS
- GHSA-6vgw-5pg2-w6jp · GitHub Advisory Database · CC BY 4.0
- CVE-2026-1703 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences