AIKIDO-2026-982477
pip is vulnerable to Path Traversal
53
Medium Risk
This Affects:
pipTL;DR
pip decodes the URL path twice when determining a link's filename from a package index. A package index can supply a doubly-encoded URL whose decoded filename is treated as an absolute or traversing path, so downloaded files are written to arbitrary locations on disk, even when installing wheels. This lets a malicious index place files outside the intended download or install directory. The fix stops the redundant decoding and treats the derived filename as a single path component.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you download or install packages from an untrusted package index.
Background info
pip is vulnerable to Path Traversal in versions 0.0.1 - 26.1.2.
How to fix this
Upgrade the pip library to the patch version.
Links
Other
pip.pypa.io/en/stable/news/#v26-2mail.python.org/archives/list/security-announce@python.org/thread/L2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX/openwall.com/lists/oss-security/2026/07/29/7
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.