Low severity · published Feb 2, 2026
CVE-2026-1703
Limited path traversal when installing wheel archives
2.0
CVSS
0.4%
EPSS
No
On KEV
Description
When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PI
pip · Python Packaging Authority
before 26.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-1703
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-1703
github.com
https://github.com/pypa/pip/commit/8e227a9be4faa9594e05d02ca05a413a2a4e7735
github.com
https://github.com/pypa/pip/pull/13777
mail.python.org
https://mail.python.org/archives/list/security-announce@python.org/thread/WIEA34D4TABF2UNQJAOMXKCICSPBE2DJ/
More from pip
6.5
CVE-2026-13346
pip absolute path traversal during download from malicious package indexes
5.9
CVE-2025-8869
Fallback tar extraction in pip doesn't check symbolic links point to extraction directory
5.5
CVE-2026-8643
pip can extract console_scripts and gui_scripts outside installation directory
4.6
CVE-2026-3219
pip doesn't reject concatenated ZIP and tar archives