CVE-2026-24049Proof of concept (PoC) published · CISA
wheel Allows Arbitrary File Permission Modification via Path Traversal
CVSS score
7.1
EPSS probability
%0.4
Risk score
0.0
Published
8 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
5.7
CVE-2021-3572
Improper input validation in N/a Python Pip
N
Patch verifiedEPSS %2
4.1
CVE-2026-8643
pip can extract console_scripts and gui_scripts outside installation directory
PP
Patch verifiedEPSS %0
6.5
CVE-2026-13346
Vulnerability in Pypa Pip
P
Patch verifiedEPSS %0
7.7
CVE-2026-102930
virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use
P
Patch status unknownEPSS %0
7.8
CVE-2026-102925
virtualenv bash and fish activation scripts execute commands embedded in paths
P
Patch status unknownEPSS %0
7.3
CVE-2026-102937
virtualenv: Command injection via --prompt in activate.bat (batch activator)
P
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-24049"