CVE-2026-8643
EUVD-2026-3368201.06.2026, 17:17
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| pypa | pip | 𝑥 < 26.1.2 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | 0:4.6.30-2.el8ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 | 0:4.6.30-2.el9ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | 0:4.7.14-3.el9ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:25.2-3.el10_2.5 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:25.2-3.el9_8.5 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.5 | 1784049109 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1782711769 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1782713671 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1782761510 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1783969139 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1785753810 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Discovery 2 | 1782763840 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Discovery 2 | 1786638573 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 26.1.1-3.1.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 26.1.2-1.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Migration Toolkit for Applications 8.2 | 1786481481 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1783082430 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1783024305 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1783342900 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1783998418 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1783998418 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1782475830 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1782475830 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.0 | 1782929133 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.0 | 1782928984 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.0 | 1782968171 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.0 | 1782929069 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.0 | 1782928977 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.2 | 1782915416 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.2 | 1782915184 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.2 | 1782914833 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.2 | 1782914721 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.2 | 1782914751 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.2 | 1782914629 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782915056 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782916020 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782914960 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782914644 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782914706 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782915015 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782914779 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782914653 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1783010225 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782887848 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782471555 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782471579 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1783073038 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782991170 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782471656 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782471663 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1783069204 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.3 | 1782991170 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1782133213 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1782726504 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1782135464 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1782136276 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1782135346 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1782132167 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1782132207 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1782132237 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1782132240 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1782132286 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1782132236 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1782132163 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1782132297 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1786612415 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1786612637 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1786635926 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073866 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073936 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073873 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073459 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073611 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073451 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073451 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1786613209 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787121387 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787074331 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073913 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787074078 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073929 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073605 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073546 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073717 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073713 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787073593 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1782485441 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||
|---|---|---|---|---|---|---|---|
| libpython2_7-1_0 |
| ||||||
| libpython2_7-1_0-32bit |
| ||||||
| libpython3_4m1_0 |
| ||||||
| libpython3_4m1_0-32bit |
| ||||||
| libpython3_6m1_0 |
| ||||||
| libpython3_6m1_0-32bit |
| ||||||
| python |
| ||||||
| python-32bit |
| ||||||
| python-base |
| ||||||
| python-base-32bit |
| ||||||
| python-curses |
| ||||||
| python-demo |
| ||||||
| python-devel |
| ||||||
| python-doc |
| ||||||
| python-doc-pdf |
| ||||||
| python-gdbm |
| ||||||
| python-idle |
| ||||||
| python-tk |
| ||||||
| python-xml |
| ||||||
| python3 |
| ||||||
| python3-base |
| ||||||
| python3-curses |
| ||||||
| python3-devel |
| ||||||
| python3-tk |
| ||||||
| python36 |
| ||||||
| python36-base |
| ||||||
| python36-curses |
| ||||||
| python36-dbm |
| ||||||
| python36-devel |
| ||||||
| python36-idle |
| ||||||
| python36-testsuite |
| ||||||
| python36-tk |
| ||||||
| python36-tools |
|
Red Hat Enterprise Linux Releases
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| python-pip-wheel |
| ||||
| python2-pip |
| ||||
| python3-pip |
| ||||
| python3-pip-wheel |
| ||||
| python3.11-pip |
| ||||
| python3.11-pip-wheel |
| ||||
| python3.12-pip |
| ||||
| python3.12-pip-wheel |
| ||||
| python3.13-pip |
| ||||
| python3.13-pip-wheel |
| ||||
| python3.14-pip |
| ||||
| python3.14-pip-wheel |
|
Azure Linux Releases
Vulnerability Media Exposure
References