CVE-2026-114110 · GHSA-pjjw-68hj-v9mw
uv vulnerable to arbitrary file deletion through RECORD entries
- Risk score
- 42/100
- CVSS
- 5.3 v3.1
- Exploit chance (30 days)
- 0.3%
- Published
- 10 Apr 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by supplying wheels with relative traversal paths in RECORD entries. Attackers can craft a malicious wheel whose RECORD references files outside the installation prefix, causing uv to delete those files when…
- Affected
- uv (pip) <= 0.11.5
- Fix
- Upgrade uv to 0.11.6 or later.
- Exploitation
- No known exploitation
Story map
At a glance
uv: Amber, patch this week. By default, uv verifies TLS connections against a vendored copy of the `webpki-root-certs` bundle. Versions before 0.13.4 include the `emSign ECC Root CA - G3` root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private keys, and the CA has revoked them. An attacker with one of th…
The flaws
- CVE-2026-114110: Uv vulnerable to arbitrary file deletion through RECORD entries (CVSS 5.3 · EPSS 0%)
- GHSA-hq85-5cpj-mr62: Uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised (CVSS 9.1)
- CVE-2026-104843: Path traversal on Windows through wheel extraction (CVSS 5.9 · EPSS 0%)
The fix
Upgrade uv: 0.11.6 · 0.13.4 · 0.12.18 or later on your release line
Who is exposed: uv (pip) < 0.13.4
Where it stands
- No known exploitation
Connects to
- Same weakness: Path traversal (CWE-23). 26 other warnings in 30 days
Why it is Yellow
- CVSS 5.3 medium
- On your watchlist: PyPI
Affected packages
| Package | Ecosystem | Vulnerable | Fixed in |
|---|---|---|---|
| uv | pip | <= 0.11.5 | 0.11.6 |
References
- https://github.com/astral-sh/uv/security/advisories/GHSA-pjjw-68hj-v9mw
- https://www.vulncheck.com/advisories/astral-uv-before-0.11.6-arbitrary-file-deletion-via-wheel-record-entries
- https://github.com/advisories/GHSA-pjjw-68hj-v9mw
- https://github.com/astral-sh/uv/pull/18942
- https://github.com/astral-sh/uv/pull/18943
- https://github.com/astral-sh/uv/commit/7983c7a5bef236fd8a04580fcedae7bd5bde4cdb
- https://github.com/astral-sh/uv/commit/a0e461ac44851f9a0f6e8974733e77d46f7a9ea9
- https://github.com/astral-sh/uv/releases/tag/0.11.6
- https://nvd.nist.gov/vuln/detail/CVE-2026-114110
- https://github.com/advisories/GHSA-pjjw-68hj-v9mw
Original description
Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by supplying wheels with relative traversal paths in RECORD entries. Attackers can craft a malicious wheel whose RECORD references files outside the installation prefix, causing uv to delete those files when the user uninstalls the package.
Last activity 21 Oct 2026. Patch Forecast updates every hour.