Read the docs
TI-2026-26838 Aliases CVE-2026-34591GHSA-2599-h6xx-hpxp

Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write

Priority MEDIUM 64CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.

Summary

Poetry is a dependency manager for Python. From version 1.4.0 to before version 2.3.3, a crafted wheel can contain ../ paths that Poetry writes to disk without containment checks, allowing arbitrary file write with the privileges of the Poetry process. It is reachable from untrusted package artifacts during normal install flows. (Normally, installing a malicious wheel is not sufficient for execution of malicious code. Malicious code will only be executed after installation if the malicious package is imported or invoked by the user.). This issue has been patched in version 2.3.3.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00486 42nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed poetry (python-poetry): 2.3.3poetry (PyPI): 2.3.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
python-poetrypoetry1.4.0 to before 2.3.32.3.3Patch availableCNA
—poetry (PyPI)1.4.0 to before 2.3.32.3.3Patch availableGHSA-2599-h6xx-hpxp
  • poetry Vendorpython-poetry Affected 1.4.0 to before 2.3.3 Fixed in 2.3.3 Patch available CNA
  • poetry (PyPI) Vendor— Affected 1.4.0 to before 2.3.3 Fixed in 2.3.3 Patch available GHSA-2599-h6xx-hpxp

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:python-poetry:poetry:*:*:*:*:*:python:*:*1.4.0 to before 2.3.3Vulnerablepython-poetry
  • cpe:2.3:a:python-poetry:poetry:*:*:*:*:*:python:*:* Versions 1.4.0 to before 2.3.3 Vulnerable ·python-poetry

Remediation

  • Fix · CNA poetry (python-poetry) Fixed in 2.3.3
  • Fix · GHSA-2599-h6xx-hpxp poetry (PyPI) Fixed in 2.3.3 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Not affected: 2 products
  • Red Hat OpenShift Container Platform 4
  • Red Hat Satellite 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-34591
  2. 2026-10-03 Alias added: GHSA-2599-h6xx-hpxp

References

Exploit 1

Patch 2

Advisory 1

Other 2

  • TI-2022-16492 Poetry Argument Injection vulnerability can lead to local Code Execution CVSS 3.1HIGH 7.3
  • TI-2022-09621 Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes… CVSS 3.1CRITICAL 9.8
  • TI-2022-16493 Poetry's Untrusted Search Path can lead to Local Code Execution on Windows CVSS 3.1HIGH 7.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences