Back Linuxsecurity

Fedora 44 mingw-python-pip Important Arbitrary File Install CVE-2026

Linuxsecurity •LinuxSecurity Advisories • August 11, 2026

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

MinGW Windows Python pip library.

* Sun Aug 2 2026 Sandro Mani - 26.2-1 - Update to 26.2 * Thu Jul 16 2026 Fedora Release Engineering - 26.1.2-2 - Rebuilt for

[ 1 ] Bug #2509216 - CVE-2026-13346 mingw-python-pip: pip: Arbitrary file installation via malicious package indexes [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-676dfc2776' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 43 and 44 mingw-python-pip Vulnerabilities Exploited Two vulnerabilities in the mingw-python-pip library for Fedora systems have been identified, both allowing arbitrary file installation via malicious package indexes. The CVE-2026-13346 was published on July 29, 2026, affecting users of Fedora 43 and 44. The updates to mitigate these vulnerabilities were released on August 2, 2026, by Sandro Mani. Users are advised to audit their Linux privileges to limit potential compromises and escalations. The vulnerabilities can be exploited by attackers to install arbitrary files, posing a significant risk to system integrity. The updates can be applied using the 'dnf' update program. Security professionals are urged to prioritize these updates to safeguard their systems. 2 sources 58

Extracted Entities

Fedora 44 mingw-python-pip Important Arbitrary File Install CVE-2026

The full story

Extracted Entities

Companies (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (2)