PyPI/mvt CVE-2026-46486: medium 5.3, EPSS 0.38%

Mobile Verification Toolkit (MVT): Path Traversal via unsanitized File identifiers in iOS Backup processing

Action: Upgrade mvt to 2026.5.12 or later.

pip install mvt==2026.5.12

Affected

Fixed versions

Sources

• osv: GHSA-5h3g-px23-w6vw
• nvd: CVE-2026-46486
• https://github.com/mvt-project/mvt/security/advisories/GHSA-5h3g-px23-w6vw
• https://github.com/mvt-project/mvt
• https://github.com/mvt-project/mvt/releases/tag/v2026.5.12

CVE-2026-46486 · published 2026-05-21T17:05:29Z · modified 2026-07-13T16:43:36.294292365Z · JSON