Pip console_scripts path flaw enables entry point out-of-dir
CVE-2026-8643 Published on June 1, 2026

pip can extract console_scripts and gui_scripts outside installation directory
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-8643 can be exploited with network access, requires user interaction and a small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:

NETWORK

Attack Complexity:

LOW

Privileges Required:

LOW

User Interaction:

REQUIRED

Scope:

UNCHANGED

Confidentiality Impact:

HIGH

Integrity Impact:

HIGH

Availability Impact:

HIGH

Weakness Type

What is a Directory traversal Vulnerability?

The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

CVE-2026-8643 has been classified to as a Directory traversal vulnerability or weakness.

Products Associated with CVE-2026-8643

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2026-8643 are published in these products:

Python Pip

Red Hat Discovery

Red Hat Exploit Intelligence

Red Hat Migration Toolkit Applications

Red Hat Migration Toolkit Virtualization

Red Hat Pdrive Lightspeed

Red Hat Ai Inference Server

Red Hat Ansible Automation Platform

Red Hat Enterprise Linux (RHEL)

Red Hat Enterprise Linux Ai

Red Hat Hummingbird

Red Hat Openshift Ai

Red Hat Openshift

Red Hat Openshift Devspaces

Red Hat Satellite

Red Hat Trusted Artifact Signer

Red Hat Openshift Lightspeed

Red Hat Service Mesh

Red Hat Rhdh

Red Hat Quay

Red Hat Stf

Red Hat Lightspeed Core

Red Hat Rhel Cla

Affected Versions

Python Packaging Authority pip:

Version 24.0 and below 26.1.2 is affected.

Red Hat Ansible Automation Platform 2.5 for RHEL 8:

Version 0:4.6.30-2.el8ap and below * is unaffected.

Red Hat Ansible Automation Platform 2.5 for RHEL 9:

Version 0:4.6.30-2.el9ap and below * is unaffected.

Red Hat Ansible Automation Platform 2.6 for RHEL 9:

Version 0:4.7.14-3.el9ap and below * is unaffected.

Red Hat Enterprise Linux 10:

Version 0:25.2-3.el10_2.5 and below * is unaffected.

Red Hat Enterprise Linux 9:

Version 0:25.2-3.el9_8.5 and below * is unaffected.

Red Hat Ansible Automation Platform 2.5:

Version 1784049109 and below * is unaffected.

Red Hat Ansible Automation Platform 2.6:

Version 1782711769 and below * is unaffected.

Red Hat Ansible Automation Platform 2.6:

Version 1782713671 and below * is unaffected.

Red Hat Ansible Automation Platform 2.6:

Version 1782761510 and below * is unaffected.

Red Hat Ansible Automation Platform 2.6:

Version 1783969139 and below * is unaffected.

Red Hat Ansible Automation Platform 2.6:

Version 1785753810 and below * is unaffected.

Red Hat Discovery 2:

Version 1782763840 and below * is unaffected.
Version 1786638573 and below * is unaffected.

Red Hat Hardened Images:

Version 26.1.1-3.1.hum1 and below * is unaffected.
Version 26.1.2-1.hum1 and below * is unaffected.

Red Hat Migration Toolkit for Applications 8.2:

Version 1786481481 and below * is unaffected.

Red Hat OpenShift AI 2.25:

Version 1783082430 and below * is unaffected.

Red Hat OpenShift AI 2.25:

Version 1783024305 and below * is unaffected.

Red Hat OpenShift AI 2.25:

Version 1783342900 and below * is unaffected.

Red Hat OpenShift AI 2.25:

Version 1783998418 and below * is unaffected.

Red Hat OpenShift AI 2.25:

Version 1783998418 and below * is unaffected.

Red Hat OpenShift AI 2.25:

Version 1782475830 and below * is unaffected.

Red Hat OpenShift AI 2.25:

Version 1782475830 and below * is unaffected.

Red Hat OpenShift AI 3.0:

Version 1782929133 and below * is unaffected.

Red Hat OpenShift AI 3.0:

Version 1782928984 and below * is unaffected.

Red Hat OpenShift AI 3.0:

Version 1782968171 and below * is unaffected.

Red Hat OpenShift AI 3.0:

Version 1782929069 and below * is unaffected.

Red Hat OpenShift AI 3.0:

Version 1782928977 and below * is unaffected.

Red Hat OpenShift AI 3.2:

Version 1782915416 and below * is unaffected.

Red Hat OpenShift AI 3.2:

Version 1782915184 and below * is unaffected.

Red Hat OpenShift AI 3.2:

Version 1782914833 and below * is unaffected.

Red Hat OpenShift AI 3.2:

Version 1782914721 and below * is unaffected.
Version 1782914751 and below * is unaffected.

Red Hat OpenShift AI 3.2:

Version 1782914629 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782915056 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782916020 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782914960 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782914644 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782914706 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782915015 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782914779 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782914653 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1783010225 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782887848 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782471555 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782471579 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1783073038 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782991170 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782471656 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782471663 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1783069204 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1782991170 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1782133213 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1782726504 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1782135464 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1782136276 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1782135346 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1782132167 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1782132207 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1782132237 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1782132240 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1782132286 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1782132236 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1782132163 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1782132297 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1786612415 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1786612637 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1786635926 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073866 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073936 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073873 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073459 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073611 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073451 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073451 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1786613209 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787121387 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787074331 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073913 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787074078 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073929 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073605 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073546 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073717 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073713 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787073593 and below * is unaffected.

Red Hat Trusted Artifact Signer 1.4:

Version 1782485441 and below * is unaffected.

Red Hat Exploit Intelligence: Red Hat Lightspeed Core: Red Hat Lightspeed Core: Red Hat Migration Toolkit for Virtualization: Red Hat Migration Toolkit for Virtualization: Red Hat OpenShift Lightspeed: Red Hat OpenShift Lightspeed: Red Hat OpenShift Service Mesh 3: Pen Drive Powered by Red Hat Lightspeed: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat AI Inference Server: Red Hat Ansible Automation Platform 2: Red Hat Ansible Automation Platform 2: Red Hat Ansible Automation Platform 2: Red Hat Ansible Automation Platform 2: Red Hat Ansible Automation Platform 2: Red Hat Ansible Automation Platform 2: Red Hat Ansible Automation Platform 2: Red Hat Ansible Automation Platform 2: Red Hat Ansible Automation Platform 2: Red Hat Developer Hub: Red Hat Developer Hub: Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 7: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux AI (RHEL AI) 3: Red Hat Enterprise Linux AI (RHEL AI) 3: Red Hat Enterprise Linux AI (RHEL AI) 3: Red Hat Enterprise Linux AI (RHEL AI) 3: Red Hat Enterprise Linux AI (RHEL AI) 3: Red Hat Enterprise Linux AI (RHEL AI) 3: Red Hat Enterprise Linux AI (RHEL AI) 3: Red Hat Enterprise Linux AI (RHEL AI) 3: Red Hat Enterprise Linux command line assistant: Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift Container Platform 4: Red Hat OpenShift Container Platform 4: Red Hat OpenShift Dev Spaces: Red Hat Quay 3: Red Hat Quay 3: Red Hat Satellite 6: Red Hat Satellite 6: Red Hat Satellite 6: Red Hat Trusted Artifact Signer: Red Hat Service Telemetry Framework 1.5: Red Hat Service Telemetry Framework 1.5: Red Hat Service Telemetry Framework 1.5:

Exploit Probability

EPSS

0.17%

Percentile

6.00%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.