CVE-2025-54368: uv Package Vulnerability Allows ZIP Payload Obfuscation
Summary
CVE-2025-54368: uv allows ZIP payload obfuscation through parsing differentials. Affects uv versions < 0.8.6. Fixed in 0.8.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The uv package is a Python library that facilitates the installation of packages from ZIP archives. It is designed to streamline the process of package management in Python environments. However, versions 0.8.5 and earlier have a critical vulnerability that allows attackers to exploit ZIP file parsing differentials, potentially leading to the execution of malicious code.
Vulnerability Detail
In versions 0.8.5 and earlier of the uv package, remote ZIP archives were processed in a manner that did not reconcile file entries against the archive's central directory. This flaw allows attackers to create ZIP files that extract differently depending on the package installer used. Specifically, an attacker could craft a ZIP archive that appears legitimate on some installers while containing malicious content on others. This vulnerability is exacerbated by the ambiguous nature of the ZIP standard, which may lead to similar issues in other ZIP parsers. User interaction is required to exploit this vulnerability, as the user must run 'uv install $package' with an attacker-controlled package.
How To Fix
Latest published version: 0.13.5 as of 22 Oct 2026
pip install --upgrade "uv==0.13.5"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.8.6
This is the first release that contains the fix.
pip install --upgrade "uv==0.8.6"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If users experience issues after upgrading, they can temporarily revert to the previous behavior by setting the environment variable: 'export UV_INSECURE_NO_ZIP_VALIDATION=1'. However, this is not recommended as it exposes users to potential risks.
Conclusion
The uv package has a significant vulnerability that allows for ZIP payload obfuscation, potentially leading to malicious code execution. Users are strongly advised to upgrade to version 0.8.6 or newer to mitigate this risk. Additionally, users can utilize Vulert to monitor and alert for open-source vulnerabilities in their software.
See every vulnerability recorded for uv →
FAQ
CVE-2025-54368 is a vulnerability in the uv package that allows attackers to exploit ZIP file parsing differentials, leading to potential execution of malicious code.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Versions 0.8.5 and earlier of the uv package are affected by this vulnerability.
If you cannot upgrade, consider setting the environment variable 'UV_INSECURE_NO_ZIP_VALIDATION=1' to revert to the previous behavior, but be aware that this poses security risks.
The vulnerability was discovered independently by Caleb Brown from Google and Tim Hatch from Netflix.
References
Related vulnerabilities
Recent vulnerabilities recorded for uv.
