Skip to content
Heist/ feed
Back to feed
MediumFix available

uv: Path traversal on Windows through wheel extraction

Type: advisorySources: OSV2 source records

### Impact In versions of uv from 0.12.7 to 0.12.18 on Windows, uv could be induced into writing a file outside of the installation prefix during wheel installation. A malicious wheel could use this to place an executable outside of the intended environment, including in a directory already present on the user's PATH. This vulnerability only affects Windows hosts; no other platforms are affected. ### Patches uv 0.12.18 and newer address this vulnerability. Users are encouraged to upgrade to 0.12.18. ### Workarounds There is no workaround other than upgrading to uv 0.12.18.

Products
uv
Affected versions
0.12.10, 0.12.11, 0.12.12, 0.12.13, 0.12.14, 0.12.15, 0.12.16, 0.12.17, 0.12.7, 0.12.8, 0.12.9
Fixed versions
0.12.18
CVEs
CVE-2026-104843
Confirmed fixed CVEs
Not specified
Updated in this feed
30 Oct 2026, 18:13 UTC · Revision 1

Source evidence

uv: Path traversal on Windows through wheel extraction

core-osv · Original source

Published 5 Oct 2026, 23:42 UTC

### Impact In versions of uv from 0.12.7 to 0.12.18 on Windows, uv could be induced into writing a file outside of the installation prefix during wheel installation. A malicious wheel could use this to place an executable outside of the intended environment, including in a directory already present on the user's PATH. This vulnerability only affects Windows hosts; no other platforms are affected. ### Patches uv 0.12.18 and newer address this vulnerability. Users are encouraged to upgrade to 0.12.18. ### Workarounds There is no workaround other than upgrading to uv 0.12.18.

osv:GHSA-2cv4-cqwr-gwf7

uv

Fixed versions: 0.12.18

uv

Fixed versions: 0.12.18

Complete source record
{
  "id": "ba36eaacf43bf12aa4f85aa930bb5a64b4bf3d22a5f9781824d8893876e206b6",
  "url": "https://osv.dev/vulnerability/GHSA-2cv4-cqwr-gwf7",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "uv: Path traversal on Windows through wheel extraction",
    "summary": "### Impact In versions of uv from 0.12.7 to 0.12.18 on Windows, uv could be induced into writing a file outside of the installation prefix during wheel installation. A malicious wheel could use this to place an executable outside of the intended environment, including in a directory already present on the user's PATH. This vulnerability only affects Windows hosts; no other platforms are affected. ### Patches uv 0.12.18 and newer address this vulnerability. Users are encouraged to upgrade to 0.12.18. ### Workarounds There is no workaround other than upgrading to uv 0.12.18.",
    "evidence": "osv:GHSA-2cv4-cqwr-gwf7",
    "products": [
      {
        "name": {
          "value": "uv",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0.12.18",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": [
          {
            "value": "0.12.10",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.11",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.12",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.13",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.14",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.15",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.16",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.17",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.7",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.8",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.9",
            "evidence": "/affected/0/versions"
          }
        ]
      },
      {
        "name": {
          "value": "uv",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0.12.18",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "GHSA-2cv4-cqwr-gwf7",
      "aliases": [
        "CVE-2026-104843",
        "GHSA-2cv4-cqwr-gwf7",
        "PYSEC-2026-4305"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0.12.7"
                },
                {
                  "fixed": "0.12.18"
                }
              ]
            }
          ],
          "package": {
            "name": "uv",
            "purl": "pkg:pypi/uv",
            "ecosystem": "PyPI"
          },
          "versions": [
            "0.12.10",
            "0.12.11",
            "0.12.12",
            "0.12.13",
            "0.12.14",
            "0.12.15",
            "0.12.16",
            "0.12.17",
            "0.12.7",
            "0.12.8",
            "0.12.9"
          ],
          "database_specific": {
            "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-2cv4-cqwr-gwf7/GHSA-2cv4-cqwr-gwf7.json"
          }
        },
        {
          "ranges": [
            {
              "type": "SEMVER",
              "events": [
                {
                  "introduced": "0.12.7"
                },
                {
                  "fixed": "0.12.18"
                }
              ]
            }
          ],
          "package": {
            "name": "uv",
            "purl": "pkg:cargo/uv",
            "ecosystem": "crates.io"
          },
          "database_specific": {
            "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-2cv4-cqwr-gwf7/GHSA-2cv4-cqwr-gwf7.json"
          }
        }
      ],
      "modified": "2026-10-15T14:55:34.900224098Z",
      "provider": "osv",
      "references": [
        "https://github.com/astral-sh/uv/security/advisories/GHSA-2cv4-cqwr-gwf7",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-104843",
        "https://github.com/astral-sh/uv/pull/21923",
        "https://github.com/astral-sh/uv/commit/67169645278ce082638d619beefa6d062540843b",
        "https://github.com/astral-sh/uv",
        "https://github.com/astral-sh/uv/releases/tag/0.12.18"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-22"
        ],
        "severity": "MODERATE",
        "github_reviewed": true,
        "nvd_published_at": "2026-10-02T16:16:46Z",
        "github_reviewed_at": "2026-10-05T23:42:09Z"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-104843",
        "evidence": "/aliases"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 332664,
  "published_at": "2026-10-05T23:42:09+00:00"
}

uv: Path traversal on Windows through wheel extraction

core-osv · Original source

Published 15 Oct 2026, 10:22 UTC

### Impact In versions of uv from 0.12.7 to 0.12.18 on Windows, uv could be induced into writing a file outside of the installation prefix during wheel installation. A malicious wheel could use this to place an executable outside of the intended environment, including in a directory already present on the user's PATH. This vulnerability only affects Windows hosts; no other platforms are affected. ### Patches uv 0.12.18 and newer address this vulnerability. Users are encouraged to upgrade to 0.12.18. ### Workarounds There is no workaround other than upgrading to uv 0.12.18.

osv:PYSEC-2026-4305

uv

Fixed versions: 0.12.18

Complete source record
{
  "id": "422449d0846cc0c0202c7b5546bc9bb5eac5bc249906aa6636984a2b70203778",
  "url": "https://osv.dev/vulnerability/PYSEC-2026-4305",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "uv: Path traversal on Windows through wheel extraction",
    "summary": "### Impact In versions of uv from 0.12.7 to 0.12.18 on Windows, uv could be induced into writing a file outside of the installation prefix during wheel installation. A malicious wheel could use this to place an executable outside of the intended environment, including in a directory already present on the user's PATH. This vulnerability only affects Windows hosts; no other platforms are affected. ### Patches uv 0.12.18 and newer address this vulnerability. Users are encouraged to upgrade to 0.12.18. ### Workarounds There is no workaround other than upgrading to uv 0.12.18.",
    "evidence": "osv:PYSEC-2026-4305",
    "products": [
      {
        "name": {
          "value": "uv",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0.12.18",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": [
          {
            "value": "0.12.10",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.11",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.12",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.13",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.14",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.15",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.16",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.17",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.7",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.8",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.12.9",
            "evidence": "/affected/0/versions"
          }
        ]
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "PYSEC-2026-4305",
      "aliases": [
        "CVE-2026-104843",
        "GHSA-2cv4-cqwr-gwf7",
        "PYSEC-2026-4305"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0.12.7"
                },
                {
                  "fixed": "0.12.18"
                }
              ]
            }
          ],
          "package": {
            "name": "uv",
            "purl": "pkg:pypi/uv",
            "ecosystem": "PyPI"
          },
          "versions": [
            "0.12.10",
            "0.12.11",
            "0.12.12",
            "0.12.13",
            "0.12.14",
            "0.12.15",
            "0.12.16",
            "0.12.17",
            "0.12.7",
            "0.12.8",
            "0.12.9"
          ],
          "database_specific": {
            "source": "https://github.com/pypa/advisory-database/blob/main/vulns/uv/PYSEC-2026-4305.yaml"
          }
        }
      ],
      "modified": "2026-10-15T14:45:14.730124938Z",
      "provider": "osv",
      "references": [
        "https://github.com/astral-sh/uv/security/advisories/GHSA-2cv4-cqwr-gwf7",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-104843",
        "https://github.com/astral-sh/uv/pull/21923",
        "https://github.com/astral-sh/uv/commit/67169645278ce082638d619beefa6d062540843b",
        "https://github.com/astral-sh/uv",
        "https://github.com/astral-sh/uv/releases/tag/0.12.18",
        "https://pypi.org/project/uv",
        "https://github.com/advisories/GHSA-2cv4-cqwr-gwf7"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2026-104843",
        "evidence": "/aliases"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 332660,
  "published_at": "2026-10-15T10:22:45.276429+00:00"
}