---
id: "GHSA-m3wx-qqmx-qxvf"
kind: "vulnerability"
aliases: ["GHSA-m3wx-qqmx-qxvf"]
title: "Duplicate Advisory: uv vulnerable to arbitrary file deletion through RECORD entries"
severity: "high"
cvss: 5.3
epss: null
exploited: false
status: "withdrawn"
category: "package"
products: [{"name": "uv", "fixed": [], "affected": "< 0.11.6", "ecosystem": "pypi"}]
ecosystems: ["pypi"]
tags: ["ci", "cwe-23", "package", "python", "uv"]
not_affected_if: ["uv-0.11.6-or-later"]
published_at: "2026-10-21T03:32:27+00:00"
first_seen_at: "2026-10-23T20:59:05+00:00"
updated_at: "2026-10-23T21:00:22+00:00"
sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-m3wx-qqmx-qxvf", "first_seen_at": "2026-10-23T20:59:05+00:00"}]
---

# Duplicate Advisory: uv vulnerable to arbitrary file deletion through RECORD entries

This advisory is withdrawn as a duplicate of GHSA-pjjw-68hj-v9mw, which covers the same uv flaw. The original text says uv before 0.11.6 follows relative traversal paths in a wheel's RECORD file, so a malicious wheel can make uv delete files outside the install location when the package is uninstalled.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- pypi:uv affected < 0.11.6 fixed ?

## How to check

Run uv --version and check whether it reports a version below 0.11.6.

## Fix

Upgrade uv to 0.11.6 or later.
Use GHSA-pjjw-68hj-v9mw as the active record for this issue.

## Timeline

- 2026-10-23T20:59:05+00:00 ghsa https://github.com/advisories/GHSA-m3wx-qqmx-qxvf

## From the sources

## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-pjjw-68hj-v9mw. This link is maintained to preserve external references.

## Original Description
Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by supplying wheels with relative traversal paths in RECORD entries. Attackers can craft a malicious wheel whose RECORD references files outside the installation prefix, causing uv to delete those files when the user uninstalls the package.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_