CLEANSTART-2026-LH77976 pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels

🗓️ 30 Oct 2026 17:05:25Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 8 Views

pip incorrectly handles doubly-encoded URLs in k8s-sidecar, allowing arbitrary file installs.

Reporter	Title	Published	Views	Family All 380
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by a pip vulnerability that could allow arbitrary file writes through improperly handled package URLs from a malicious package index	23 Oct 202608:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple path traversal vulnerabilities due to pip	26 Aug 202611:12	–	ibm
attackerkb	CVE-2026-13346	29 Jul 202618:33	–	attackerkb
BDU FSTEC	Python pip Unauthorized Access	25 Sep 202600:00	–	bdu_fstec
CBLMariner	CVE-2026-13346 affecting package python-pip for versions less than 24.2-10	11 Sep 202623:52	–	cbl_mariner
CBLMariner	CVE-2026-13346 affecting package python-virtualenv for versions less than 20.36.1-6	11 Sep 202623:52	–	cbl_mariner
Chainguard	CVE-2026-13346 vulnerabilities	5 Sep 202620:58	–	cgr
Circl	CVE-2026-13346	29 Jul 202619:33	–	circl
CVE	CVE-2026-13346	29 Jul 202618:33	–	cve
Cvelist	CVE-2026-13346 pip absolute path traversal during download from malicious package indexes	29 Jul 202618:33	–	cvelist

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LH77976.json
osv	www.osv.dev/vulnerability/CVE-2026-13346
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-13346

31 Oct 2026 01:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 45.6

CVSS 3.16.5

EPSS0.00292

pip k8s-sidecar doubly-encoded URLs arbitrary file install