CVE-2026-8643: pip can extract console_scripts and gui_scripts outside installation directory

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• pypa pipbefore 26.1.2

Versions reported by the vendor

Affected version ranges reported by the assigning authority (PSF). Independent of NVD's CPE analysis and usually ahead of it.

• Python Packaging Authority pip

  • 24.0 and later · before 26.1.2affected · python

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2018-20225An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended
  32Monitor
• CVE-2019-20916The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition h
  31Monitor
• CVE-2013-1629pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which all
  29Monitor

Published before and after this one in the same product

• ← EarlierCVE-2021-3572Nov 10, 2021 · A flaw was found in python-pip in the way it handled Unicode separators in git references.
  23Monitor
• ← EarlierCVE-2023-5752Oct 25, 2023 · Mercurial configuration injectable in repo revision when installing via pip
  13Monitor
• Later →CVE-2026-13346Jul 29, 2026 · pip absolute path traversal during download from malicious package indexes
  22Monitor

Root cause

A user-supplied file name is joined with the allowed directory, but the result is never checked to confirm it is still inside that directory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1const file = path.join(ROOT, req.query.name);2res.sendFile(file);

1const file = path.resolve(ROOT, req.query.name);2if (!file.startsWith(ROOT + path.sep)) {3  return res.sendStatus(400);4}5res.sendFile(file);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.