The vulnerability in pip arises from treating console_scripts and gui_scripts as paths instead of sanitized file names, which leads to the installation of entry points outside the intended directory. This path traversal issue (CWE-22) can allow an attacker with local privileges to overwrite arbitrary files during pip wheel installation. The CVSS 4.1 score reflects a medium severity with local attack vector, low complexity, partial privileges required, and user interaction needed. Red Hat advisories confirm the issue and provide fixes within their Ansible Automation Platform updates, indicating that patched versions are available through those updates. No direct patch link for pip itself is provided in the advisory, and the remediation level is not explicitly stated, so patch status should be confirmed via vendor advisories.

An attacker with local access and partial privileges could exploit this vulnerability by crafting malicious entry point names that cause pip to write files outside the installation directory, potentially overwriting arbitrary files. This could lead to unauthorized file modification or code execution depending on the context of the overwritten files. The impact is limited by the need for local access and user interaction, and no known exploits are reported in the wild.

Red Hat has issued security advisories addressing this vulnerability as part of updates to their Ansible Automation Platform. Users should apply these vendor-provided updates to remediate the issue. Since no explicit patch or remediation level is stated for pip itself, users should monitor the official Python Packaging Authority and Red Hat advisories for confirmed patches or workarounds. Until patched, avoid installing untrusted packages or entry points that could exploit this path traversal. Patch status is not yet confirmed for pip upstream; check vendor advisories for current remediation guidance.