From fb1ccbcce017ed4ee74b3cb4ac40252726b4218d Mon Sep 17 00:00:00 2001
From: Ben Noordhuis <info@bnoordhuis.nl>
Date: Wed, 4 Feb 2026 22:43:14 +0100
Subject: [PATCH] doc: add setuid warning to uv_exepath

---
 docs/src/misc.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docs/src/misc.rst b/docs/src/misc.rst
index 0bf9093c1..09db6244a 100644
--- a/docs/src/misc.rst
+++ b/docs/src/misc.rst
@@ -522,6 +522,10 @@ API
     Gets the executable path. You *must* call `uv_setup_args` before calling
     this function.
 
+    Be careful in setuid executables. On some platforms the executable path
+    is an arbitrary string that is controlled by the user. On other platforms
+    environment variables are consulted that may be under control of the user.
+
 .. c:function:: int uv_cwd(char* buffer, size_t* size)
 
     Gets the current working directory, and stores it in `buffer`. If the