CVE-2026-114110: Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries

Q: What must an attacker do for exploitation to occur?

The attacker must supply a malicious wheel containing relative traversal paths in its RECORD entries. A user must install that package and later uninstall it with uv.

Q: When does the file deletion happen?

Deletion occurs when uv uninstalls the malicious package, not merely when the wheel is supplied. The crafted RECORD entries can cause uv to target files outside the installation prefix during uninstall.

Q: What version addresses this issue?

Upgrade Astral uv to version 0.11.6 or later. Versions before 0.11.6 are affected.

Published Oct 21, 2026

Updated

Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by supplying wheels with relative traversal paths in RECORD entries. Attackers can craft a malicious wheel whose RECORD references files outside the installation prefix, causing uv to delete those files when the user uninstalls the package.

Affected Software

1 affected component

astral uv<0.11.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Astral uv to a version that resolves this vulnerability.
Fixed in 0.11.6

Event History

Oct 21, 2026

CVE Published

via MITRE·12:37 AM

Data Sourced

via MITRE·12:37 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What must an attacker do for exploitation to occur?

The attacker must supply a malicious wheel containing relative traversal paths in its RECORD entries. A user must install that package and later uninstall it with uv.

When does the file deletion happen?