Read the docs
TI-2026-78722 Aliases CVE-2026-114109

Path traversal in uv lets malicious wheels write files

Priority MEDIUM 40CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 1 fixed, 4 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-22 and the CVSS impact.

Summary

The astral-sh uv package before 0.11.15 contains a path traversal flaw (CWE-22) that lets malicious wheels write files outside the scripts directory through crafted console_scripts or gui_scripts entry point names. An attacker who induces a user to install a malicious wheel can place executables in PATH directories, shadowing or overwriting existing binaries for code execution.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

Description from the CNA

uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted console_scripts or gui_scripts entry point names. Attackers who induce users to install a malicious wheel can place executables in PATH directories, shadowing or overwriting existing binaries for code execution.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00382 32nd percentileScored 2026-11-07
Fix Partial uv (astral-sh): 0.11.15Red Hat: 3 advisoriesRed Hat: 1 fixed, 4 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
astral-shuvbefore 0.11.150.11.15Patch availableCNA
astral-shuvbefore 0.11.150.11.15Patch availableCNA
  • uv Vendorastral-sh Affected before 0.11.15 Fixed in 0.11.15 Patch available CNA
  • uv Vendorastral-sh Affected before 0.11.15 Fixed in 0.11.15 Patch available CNA

Remediation

Upgrade uv to version 0.11.15. Red Hat advisories RHSA-2026:91219, RHSA-2026:91236 and RHSA-2026:94476 fix Red Hat OpenShift AI 3.0. The sources list no fixed version for Lightspeed Core, Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3 and Red Hat OpenShift AI (RHOAI).

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

  • Fix · CNA uv (astral-sh) Fixed in 0.11.15
  • Fix · CNA uv (astral-sh) Fixed in 0.11.15

Red Hat 3 advisories

  • RHSA-2026:94476 Released 2026-11-03 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.8 (CUDA)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:91236 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (CUDA)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:91219 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (ROCm)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-rocm-rhel9

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Lightspeed CoreAffectedNo fix yet
Red Hat AI Inference ServerAffectedNo fix yet
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift AI 3.0Fixed RHSA-2026:91219, RHSA-2026:91236, RHSA-2026:94476
Not affected: 3 products
  • Lightspeed Services for Advanced Cluster Management
  • OpenShift Lightspeed
  • Red Hat OpenShift AI (RHOAI)

Timeline

  1. 2026-10-21 Threatist record created from CVE-2026-114109
  2. 2026-10-22 Priority changed: MEDIUM → LOW
  3. 2026-10-23 Affected versions changed · Red Hat
  4. 2026-10-23 CVSS score added · Red Hat
  5. 2026-10-27 CVSS score changed · Red Hat
  6. 2026-10-28 CISA SSVC decision points changed
  7. 2026-10-28 Priority changed: LOW → MEDIUM
  8. 2026-10-30 Fix available: RHSA-2026:91219 · Red Hat
  9. 2026-10-30 Fix available: RHSA-2026:91236 · Red Hat
  10. 2026-10-30 Fix available: Red Hat OpenShift AI 3.0 · Red Hat
  11. 2026-11-04 Fix available: RHSA-2026:94476 · Red Hat
  12. 2026-11-04 Affected versions changed · Red Hat

References

Advisory 1

  • TI-2025-38758 astral-tokio-tar Vulnerable to PAX Header Desynchronization CVSS 3.1HIGH 8.1
  • TI-2026-78723 Path traversal in Astral uv lets attackers delete arbitrary files CVSS 4.0HIGH 8.7
  • TI-2025-43946 Path traversal in Astral uv sdist extraction allows file writes CVSS 4.0HIGH 8.7
  • TI-2025-34180 uv is vulnerable to ZIP payload obfuscation through parsing differentials CVSS 4.0MEDIUM 6.8
  • TI-2026-66129 uv: Path traversal on Windows through wheel extraction CVSS 4.0MEDIUM 5.9
  • TI-2025-37264 astral-tokio-tar has a path traversal in tar extraction CVSS 4.0MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences