CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation

Overview

Severity
N/A
Exploit Status
Not Exploited
Patch Tuesday
2026-Apr
Released
2026-04-30
EPSS Score
0.01% (percentile: 1.7%)

Affected Products (1)

Open Source Software

  • azl3 python-pip 24.2-6 on Azure Linux 3.0

Revision History

  • 2026-04-30: Information published.