AIKIDO-2025-10054

pip is vulnerable to Arbitrary Code Execution

60

Medium

pip Python

AIKIDO-2025-10054: pip is vulnerable to Arbitrary Code Execution in versions 24.1.0 - 24.3.1.

Arbitrary Code Execution
Vuln in 24.1.0 - 24.3.1
Fixed in 25.0.0
No CVE available
TL;DR

Who does this affect?

How can it be fixed?

Background info

Link to vendor website

Logo
ยฉ 2024 Aikido Security BV | BE0792914919
๐Ÿ‡ช๐Ÿ‡บ Registered address: Coupure Rechts 88, 9000, Ghent, Belgium
๐Ÿ‡ช๐Ÿ‡บ Office address: Gebroeders van Eyckstraat 2, 9000, Ghent, Belgium
๐Ÿ‡บ๐Ÿ‡ธ Office address: 95 Third St, 2nd Fl, San Francisco, CA 94103, US
Any use of the intel.aikido.dev website and content is explicitly subject to Aikido Terms of Use.
The Intel vulnerability and malware feed is licensed under a dual license.