High severity · published May 8, 2020
CVE-2018-20225
An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a…
7.8
CVSS
1.8%
EPSS
No
On KEV
Description
An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PI
Pip · Pypa
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-20225
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-20225
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1835736
Third Party Advisory
https://cowlicks.website/posts/arbitrary-code-execution-from-pips-extra-index-url.html
lists.apache.org
https://lists.apache.org/thread.html/rb1adce798445facd032870d644eb39c4baaf9c4a7dd5477d12bb6ab2%40%3Cgithub.arrow.apache.org%3E
Release Notes
https://pip.pypa.io/en/stable/news/
More from Pip
7.5
CVE-2019-20916
The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as…
6.5
CVE-2026-13346
pip absolute path traversal during download from malicious package indexes
5.9
CVE-2013-5123
The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks
5.7
CVE-2021-3572
A flaw was found in python-pip in the way it handled Unicode separators in git references
5.5
CVE-2026-8643
pip can extract console_scripts and gui_scripts outside installation directory