THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-24049 (HIGH 7.1) — wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the fil

[NVD] CVE-2026-24049 (HIGH 7.1) — wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the fil

lownvdPublished 2026-01-22

CVE-2026-24049 CVSS: 7.1 HIGH Published: 2026-01-22T05:16:23.157

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation,

Indicators of compromise

CVE-2026-24049cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-24049