CVE-2026-59890: pypa setuptools Improper Handling of Unicode Encoding

CVSS: 6.1v3.1MediumAnalyzed

AliasesGHSA-h35f-9h28-mq5cBIT-setuptools-2026-59890PYSEC-2026-3447+348 more

Published 08-07-2026Last modified 08-07-2026

Vulnerability summary

CVE-2026-59890 is a medium (CVSS 6.1) Improper Handling of Unicode Encoding vulnerability in pypa setuptools. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 33.2% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

34/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.1/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.40%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1github

Advisory lineage

Upstream 0 · Downstream 0 · Related 1

CGA-CVF4-H23F-FPJM

Timeline

08-07-2026
PublishedVulnerability first disclosed.
08-07-2026
Last modifiedVulnerability information updated.

Description

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unicode normalization, so on macOS APFS or HFS+ an NFD file name could bypass an NFC exclusion rule and be packed into a source distribution. This issue is fixed in version 83.0.0.

CVSS metrics

7 scores · 7 sources · 1 version

v3.16.1

EPSS trend

Probability

0.40%

Chance of exploitation in the next 30 days

Percentile

33%

Versus all other CVEs

30-day change

0.00 pp

From 0.40% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.40%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

githubUnverified
Setuptools
Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Chainguard145 products

airflow-3< 3.3.0-r4
airflow-3-iamguarded-compatAll versions (No fix recorded)
ansible-operator< 1.42.3-r9
ansible-operator-fips< 1.42.3-r6
authentik-2025.12All versions (No fix recorded)

authentik-2026.2< 2026.2.6-r11
authentik-2026.5< 2026.5.6-r3 | < 2026.5.6-r4
authentik-fips-2025.12All versions (No fix recorded)
authentik-fips-2026.2< 2026.2.6-r10
authentik-fips-2026.5< 2026.5.6-r3
awx< 24.6.1-r60
datadog-agent-7.71All versions (No fix recorded)
datadog-agent-7.71-core-integrationsAll versions (No fix recorded)
datadog-agent-7.72All versions (No fix recorded)
datadog-agent-7.72-core-integrationsAll versions (No fix recorded)
datadog-agent-7.73< 7.73.3-r23
datadog-agent-7.73-core-integrations< 7.73.3-r23
datadog-agent-7.74< 7.74.1-r24
datadog-agent-7.74-core-integrations< 7.74.1-r24
datadog-agent-7.75All versions (No fix recorded)
datadog-agent-7.75-core-integrationsAll versions (No fix recorded)
datadog-agent-7.76< 7.76.3-r34 | All versions (No fix recorded)
datadog-agent-7.76-core-integrations< 7.76.3-r34
datadog-agent-7.77< 7.77.3-r23
datadog-agent-7.77-core-integrations< 7.77.3-r23
datadog-agent-7.78< 7.78.4-r16
datadog-agent-7.78-core-integrations< 7.78.4-r16
datadog-agent-7.79< 7.79.2-r16
datadog-agent-7.79-core-integrations< 7.79.2-r16
datadog-agent-7.80< 7.80.4-r10
datadog-agent-7.80-core-integrations< 7.80.4-r10
datadog-agent-fips-7.71All versions (No fix recorded)
datadog-agent-fips-7.71-core-integrationsAll versions (No fix recorded)
datadog-agent-fips-7.72All versions (No fix recorded)
datadog-agent-fips-7.72-core-integrationsAll versions (No fix recorded)
datadog-agent-fips-7.73< 7.73.3-r26
datadog-agent-fips-7.73-core-integrations< 7.73.3-r26
datadog-agent-fips-7.74< 7.74.1-r26
datadog-agent-fips-7.74-core-integrations< 7.74.1-r26
datadog-agent-fips-7.75< 7.75.4-r10 | All versions (No fix recorded)
datadog-agent-fips-7.75-core-integrationsAll versions (No fix recorded)
datadog-agent-fips-7.76< 7.76.3-r35
datadog-agent-fips-7.76-core-integrations< 7.76.3-r35
datadog-agent-fips-7.77< 7.77.3-r28
datadog-agent-fips-7.77-core-integrations< 7.77.3-r29
datadog-agent-fips-7.78< 7.78.4-r14
datadog-agent-fips-7.78-core-integrations< 7.78.4-r14
datadog-agent-fips-7.79< 7.79.2-r12
datadog-agent-fips-7.79-core-integrations< 7.79.2-r12
datadog-agent-fips-7.80< 7.80.4-r8 | < 7.80.4-r7
datadog-agent-fips-7.80-core-integrations< 7.80.4-r8
datahub-ingestion< 1.6.0-r6
datahub-ingestion-fips< 1.6.0-r8
dbt-bigquery< 1.10.3-r6
duplicity< 3.1.0-r2
graalvm-25-graalpy-venvAll versions (No fix recorded)
httpie< 3.2.4-r13
katib-suggestion-goptuna-compat< 0.19.0-r40
katib-suggestion-hyperband< 0.19.0-r32
katib-suggestion-hyperopt< 0.19.0-r32 | < 0.19.0-r40
katib-suggestion-nas-darts< 0.19.0-r32
katib-suggestion-nas-enas< 0.19.0-r32
katib-suggestion-optuna-enas< 0.19.0-r32
katib-suggestion-pbt-enas< 0.19.0-r32
katib-suggestion-skopt-enas< 0.19.0-r32
kserve-huggingfaceserver-cuda-13.3All versions (No fix recorded)
kserve-storage-controllerAll versions (No fix recorded)
kubeflow-jupyter-web-app< 1.10.0-r23
kubeflow-volumes-web-app< 1.10.0-r22
label-studio< 1.23.0-r11
lmcache-cuda-12.8All versions (No fix recorded)
lmcache-cuda-13.0All versions (No fix recorded)
localstackAll versions (No fix recorded)
mlflow< 3.16.0-r0 | < 3.15.1-r3
mlflow-fips< 3.15.1-r2
nemo< 2.7.3-r16
nemo-rl-cuda-13.0< 0.7.0-r1 | All versions (No fix recorded)
nemo-rl-cuda-13.0-automodelAll versions (No fix recorded) | < 0.7.0-r1
nemo-rl-cuda-13.0-mcore< 0.7.0-r1 | All versions (No fix recorded)
nemo-rl-cuda-13.0-sglangAll versions (No fix recorded) | < 0.7.0-r1
nemo-rl-cuda-13.0-vllm< 0.7.0-r1 | All versions (No fix recorded)
nvidia-nsight-compute-13.3< 2026.2.1.5-r1
opal< 0.9.6-r4
openstack-glance-2025.1< 30.2.0_git20260616-r6
openstack-glance-2025.1-fips< 30.2.0_git20260617-r6
openstack-glance-2026.1< 32.0.0_git20260723-r0
openstack-glance-2026.1-fips< 32.0.0_git20260625-r1
openstack-horizon-2025.1< 25.3.2_git20260617-r4
openstack-horizon-2025.1-fips< 25.3.2_git20260617-r4
openstack-horizon-2025.2< 25.5.2_git20260617-r4
openstack-horizon-2025.2-fips< 25.5.2_git20260617-r5
openstack-horizon-2026.1< 25.7.3_git20260630-r1
openstack-horizon-2026.1-fips< 25.7.3_git20260630-r1
openstack-keystone-2025.1< 27.0.1_git20260618-r7
openstack-keystone-2025.1-fips< 27.0.1_git20260618-r8
openstack-keystone-2025.2-fips< 28.0.1_git20260618-r6
openstack-keystone-2026.1< 29.0.1_git20260616-r7
openstack-keystone-2026.1-fips< 29.0.1_git20260617-r7
openstack-placement-2025.2< 14.0.0_git20260617-r7
openstack-placement-2025.2-fips< 14.0.0_git20260309-r7
openstack-placement-2026.1< 15.0.0_git20260617-r7
openstack-placement-2026.1-fips< 15.0.0_git20260617-r6
openstack-tempest-2025.1< 43.0.0-r5
openstack-tempest-2026.1< 46.2.0-r5
pgadmin4< 9.18-r1
pgadmin4-fips< 9.17-r0
py3-cassandra-medusa< 0.29.1-r1 | All versions (No fix recorded)
py3-hashinAll versions (No fix recorded)
py3.10-pip-baseAll versions (No fix recorded)
py3.10-pipenv< 2026.7.1-r1
py3.10-setuptools< 83.0.0-r0
py3.10-setuptools-79All versions (No fix recorded)
py3.11-azure-functions-worker< 4.46.0-r1
py3.11-pip-baseAll versions (No fix recorded)
py3.11-pipenv< 2026.7.1-r1
py3.11-setuptools< 83.0.0-r0
py3.11-setuptools-79All versions (No fix recorded)
py3.12-azure-functions-worker< 4.46.0-r1
py3.12-pip-baseAll versions (No fix recorded)
py3.12-pipenv< 2026.7.1-r1
py3.12-setuptools< 83.0.0-r0
py3.12-setuptools-79All versions (No fix recorded)
py3.13-azure-functions-worker< 4.46.0-r1
py3.13-pip-baseAll versions (No fix recorded)
py3.13-pipenv< 2026.7.1-r1
py3.13-setuptools-79All versions (No fix recorded)
py3.14-pip-baseAll versions (No fix recorded)
py3.14-setuptools-79All versions (No fix recorded)
py3.9-pipAll versions (No fix recorded)
py3.9-setuptoolsAll versions (No fix recorded)
pypy-3.10< 7.3.19-r20
request-1276< 0.30.0-r2 | < 0.30.0-r0
spamcheck< 3.5.3-r11
superset-6.0< 6.0.0-r13
superset-fips-6.1< 6.1.0-r3
tensorflow-cpu-jupyterAll versions (No fix recorded)
tensorflow-gpu-jupyterAll versions (No fix recorded)
text-generation-inference< 3.3.7-r22
tritonserver-backend-vllm-cuda-13.0All versions (No fix recorded) | < 25.11-r14
vast-csi< 2.6.5-r3
vllm-cuda-13.2All versions (No fix recorded)
vllm-openai-cuda-12.9All versions (No fix recorded)
vllm-openai-cuda-13.0All versions (No fix recorded)
wazuh-manager-framework< 4.14.6-r4
wazuh-manager-framework-fips< 4.14.7-r2

Show all 145

Wolfi53 products

airflow-3< 3.3.0-r4
airflow-3-iamguarded-compatAll versions (No fix recorded)
datadog-agent-7.72All versions (No fix recorded)
datadog-agent-7.72-core-integrationsAll versions (No fix recorded)
datadog-agent-7.73< 7.73.3-r23

Show all 53

Pypa1 product

setuptools< 83.0.0

Ubuntu1 product

setuptoolsAll versions (No fix recorded)

4 vendors · 200 products · Showing 200 of 205. Use Open JSON for the complete list.

References

15 links

github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5cX Refsource CONFIRMWEBEVIDENCEARTICLEREPORTAdvisoryExploitVendor AdvisoryMitigation
github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8fX Refsource MISCWEBFIXARTICLEPatch
github.com/pypa/setuptools/releases/tag/v83.0.0X Refsource MISCWEBAdvisoryARTICLERelease Notes
nvd.nist.gov/vuln/detail/CVE-2026-59890AdvisoryOval
github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2026-3447.yamlWEB
github.com/pypa/setuptoolsPACKAGE
access.redhat.com/errata/RHSA-2026:37530Advisory
images.redhat.comARTICLE
access.redhat.com/security/cve/CVE-2026-59890REPORT
access.redhat.com/security/updates/classification/ARTICLE

Show all 15 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities