Medium severity · published Apr 20, 2026
CVE-2026-3219
pip doesn't reject concatenated ZIP and tar archives
4.6
CVSS
0.1%
EPSS
No
On KEV
Description
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds with installation if the file identifies uniquely as a ZIP or tar archive, not as both.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PI
pip · Python Packaging Authority
before 26.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-3219
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-3219
github.com
https://github.com/pypa/pip/pull/13870
mail.python.org
https://mail.python.org/archives/list/security-announce@python.org/thread/QAJ5JIVWWCAJ4EZL2FP5MOOW35JS7LRJ/
www.openwall.com
http://www.openwall.com/lists/oss-security/2026/04/20/8
More from pip
6.5
CVE-2026-13346
pip absolute path traversal during download from malicious package indexes
5.9
CVE-2025-8869
Fallback tar extraction in pip doesn't check symbolic links point to extraction directory
5.5
CVE-2026-8643
pip can extract console_scripts and gui_scripts outside installation directory
2.0
CVE-2026-1703
Limited path traversal when installing wheel archives