CVE-2026-3219 pip doesn't reject concatenated ZIP and tar archives
Attackers can trick pip into installing malicious code by providing archives that are both ZIP and tar, bypassing format checks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-3219?
CVE-2026-3219 is a medium-severity vulnerability in Python Packaging Authority pip, published on 20 Apr 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds with installation if the file identifies uniquely as a ZIP or tar archive, not as both.
Weakness: CWE-434
Which versions are affected by CVE-2026-3219?
3 open source packages ship an affected version, including pip.
| Package | Affected | Fixed in |
|---|---|---|
pip PyPI | All versions | 26.1 |
pip PyPI | All versions | 26.1 |
pip PyPI | All versions | 26.1 |
Linux distribution packages (4)
python-pip Red Hat:hummingbird:1 | All versions | 0:26.1.1-3.hum1 |
python-pip-wheel Red Hat:hummingbird:1 | All versions | 0:26.1.1-3.hum1 |
python3-pip Red Hat:hummingbird:1 | All versions | 0:26.1.1-3.hum1 |
python-pip openSUSE:Tumbleweed | All versions | 26.1-1.1 |
How do I fix CVE-2026-3219?
Upgrade pip to 26.1 or later.
Is CVE-2026-3219 being exploited?
There is no known exploitation of CVE-2026-3219 in the wild and no public exploit code.
Sources
Also known as AZL-83184, AZL-83432, BELL-CVE-2026-3219, CLEANSTART-2026-RR99050, CLEANSTART-2026-WY38697, DEBIAN-CVE-2026-3219 and 21 more.