CVE-2026-104843 · GHSA-2cv4-cqwr-gwf7
uv: Path traversal on Windows through wheel extraction
- Risk score
- 48/100
- CVSS
- 5.9 v4.0
- Exploit chance (30 days)
- 0.4%
- Published
- 2 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory already present on the user's PATH. Non-Windows hosts are not affected.…
- Affected
- uv (pip) >= 0.12.7, < 0.12.18; uv (rust) >= 0.12.7, < 0.12.18
- Fix
- Upgrade uv to 0.12.18 or later.
- Exploitation
- No known exploitation
Story map
At a glance
uv: Amber, patch this week. By default, uv verifies TLS connections against a vendored copy of the `webpki-root-certs` bundle. Versions before 0.13.4 include the `emSign ECC Root CA - G3` root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private keys, and the CA has revoked them. An attacker with one of th…
The flaws
- CVE-2026-104843: Path traversal on Windows through wheel extraction (CVSS 5.9 · EPSS 0%)
- GHSA-hq85-5cpj-mr62: Uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised (CVSS 9.1)
- CVE-2026-114110: Uv vulnerable to arbitrary file deletion through RECORD entries (CVSS 5.3 · EPSS 0%)
The fix
Upgrade uv: 0.12.18 · 0.13.4 · 0.11.6 or later on your release line
Who is exposed: uv (pip) < 0.13.4
Where it stands
- No known exploitation
Connects to
- Same weakness: Path traversal (CWE-22). 398 other warnings in 30 days
Why it is Yellow
- CVSS 5.9 medium
- On your watchlist: PyPI
Affected packages
| Package | Ecosystem | Vulnerable | Fixed in |
|---|---|---|---|
| uv | pip | >= 0.12.7, < 0.12.18 | 0.12.18 |
| uv | rust | >= 0.12.7, < 0.12.18 | 0.12.18 |
References
- https://github.com/advisories/GHSA-2cv4-cqwr-gwf7
- https://github.com/astral-sh/uv/security/advisories/GHSA-2cv4-cqwr-gwf7
- https://nvd.nist.gov/vuln/detail/CVE-2026-104843
- https://github.com/astral-sh/uv/pull/21923
- https://github.com/astral-sh/uv/commit/67169645278ce082638d619beefa6d062540843b
- https://github.com/astral-sh/uv/releases/tag/0.12.18
- https://github.com/advisories/GHSA-2cv4-cqwr-gwf7
Original description
uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory already present on the user's PATH. Non-Windows hosts are not affected. This issue is fixed in version 0.12.18.
Last activity 2 Oct 2026. Patch Forecast updates every hour.