CVE-2026-8643: Python pip path traversal via entry point scripts

CVE-2026-8643 · Severity: high · CVSS 8 · Published 2026-06-01

pip, the standard package installer for Python, is vulnerable to a flaw that allows malicious software packages to install files in unauthorized locations on a user's computer. By tricking a user or automated system into installing a specially crafted Python package, an attacker could overwrite system files or place malicious scripts in sensitive directories. This could lead to full system compromise or persistent access to the affected machine.

Technologies: pip (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2026-8643 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-8643 being exploited in the wild.
How severe is CVE-2026-8643?
High severity, with a CVSS score of 8, published 1 June 2026.
Which products and versions are affected?
pip (PyPI) < 26.1.2, ECOSYSTEM:introduced=0,fixed=26.1.2.
Is there a fix for CVE-2026-8643?
Yes. pip (PyPI): upgrade to 26.1.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-8643 attacked?
It is attacked with local access, in a software library.
Am I affected by CVE-2026-8643?
Check whether you run pip (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • pip (PyPI): upgrade to 26.1.2 or later
    pip install "pip>=26.1.2"

Technical details

A path traversal vulnerability exists in pip's handling of 'console_scripts' and 'gui_scripts' entry points. The root cause is a failure to sanitize entry point names, which pip treats as paths rather than simple filenames when resolving absolute installation paths. An attacker can exploit this by creating a malicious Python package with entry point names containing directory traversal sequences (e.g., '../'). When a user installs this package via pip, the installer will write executable scripts to arbitrary locations on the filesystem, provided the user running pip has the necessary permissions. This can be used to achieve local privilege escalation or persistence by overwriting known binaries or placing scripts in startup directories. The issue is fixed in pip version 26.1.2.

Affected products

  • Python Software Foundation pip < 26.1.2

Identifiers

  • CVE-2026-8643
  • GHSA-wf93-45jw-7689
  • PYSEC-2026-196

Timeline

  • 2026-05-20: patched: Fix merged into pip main branch
  • 2026-06-01: disclosed: Public disclosure and CVE assignment
  • 2026-06-01: advisory: GitHub Advisory published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.