The vulnerability in uv before version 0.11.15 allows maliciously crafted wheels to write files outside the intended scripts directory by exploiting a path‑traversal flaw in the handling of console_scripts or gui_scripts entry point names. An attacker who can influence a user to install a malicious wheel can embed executable files in directories that are searched by the system PATH, thereby overriding legitimate binaries or inserting new executables. This enables arbitrary code execution with the privileges of the installing user.

The affected product is the uv package manager developed by astral‑sh. Versions of uv earlier than 0.11.15 are vulnerable. Users of any machine that installed uv before this patch and may obtain wheels from untrusted or third‑party sources are at risk.

The CVSS score of 8.7 classifies this flaw as high severity. The EPSS score of less than 1% indicates that, as of now, the likelihood of real‑world exploitation is low. The vulnerability is not listed in CISA KEV. The attack vector is inferred to be local, requiring the attacker to persuade a user to install a malicious wheel, but could become more remote if automated or network‑based wheel installations are enabled. Once the wheel is installed, the attacker can overwrite or shadow binaries and execute arbitrary code.