Medium severity · published Feb 27, 2026
CVE-2025-13327
Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials
6.3
CVSS
0.2%
EPSS
No
On KEV
Description
A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP (Zipped Information Package) archives that exploit parsing differentials, requiring user interaction to install an attacker-controlled package.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
High
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat AI Inference Server · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift AI (RHOAI) · Red Hat
All versions, or not specified · source: vendor
UV
uv · astral-sh
before 0.9.6 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-13327
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-13327
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-13327
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2407263
Product
https://github.com/astral-sh/uv
Patch
https://github.com/astral-sh/uv/commit/da659fee4898a73dbc75070f3e82d49f745e4628
Vendor Advisory
https://github.com/astral-sh/uv/security/advisories/GHSA-pqhf-p39g-3x64
More from uv
8.8
CVE-2026-114109
uv before 0.11.15 Arbitrary File Write via Entry Point Names
6.5
CVE-2025-71437
Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extraction
5.9
CVE-2026-104843
uv: Path traversal on Windows through wheel extraction
5.3
CVE-2026-114110
Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries