@@ -161,8 +161,9 @@ python 3.13
     version-file: ".tool-versions"
 ```
 
-Only a single Python version is supported. Multiple fallback versions and the asdf `ref:`, `path:`,
-and `system` forms are ignored with a warning.
+Only a single Python version is supported. Filesystem paths are not supported for uv or Python.
+Multiple Python fallback versions and the asdf `ref:`, `path:`, and `system` forms are ignored with
+a warning.
 
 ```yaml
 - name: Install the latest version of uv and set the python version to 3.13t
 
@@ -113,6 +113,20 @@ describe("getUvVersionFromToolVersions", () => {
     );
   });
 
+  it.each(["/my/python/exploit", "my/exploited/uv", "C:\\exploited\\uv"])(
+    "should warn and return undefined for path %s",
+    async (version) => {
+      mockReadFileSync.mockReturnValue(`uv ${version}`);
+
+      const result = await getVersionFromToolVersions(".tool-versions");
+
+      expect(result).toBeUndefined();
+      expect(mockWarning).toHaveBeenCalledWith(
+        `The uv version ${version} in .tool-versions is not supported. Paths are not allowed.`,
+      );
+    },
+  );
+
   it("should handle file path with .tool-versions extension", async () => {
     const fileContent = "uv 0.1.0";
     mockReadFileSync.mockReturnValue(fileContent);
@@ -170,19 +184,23 @@ describe("getPythonVersionFromToolVersions", () => {
     );
   });
 
-  it.each(["ref:main", "path:~/src/python", "system"])(
-    "should warn and return undefined for %s",
-    async (version) => {
-      mockReadFileSync.mockReturnValue(`python ${version}`);
+  it.each([
+    "ref:main",
+    "path:~/src/python",
+    "system",
+    "/my/python/exploit",
+    "my/exploited/python",
+    "C:\\exploited\\python",
+  ])("should warn and return undefined for %s", async (version) => {
+    mockReadFileSync.mockReturnValue(`python ${version}`);
 
-      const result = await getPythonVersionFromToolVersions(".tool-versions");
+    const result = await getPythonVersionFromToolVersions(".tool-versions");
 
-      expect(result).toBeUndefined();
-      expect(mockWarning).toHaveBeenCalledWith(
-        `The Python version ${version} in .tool-versions is not supported. The Python entry will be ignored.`,
-      );
-    },
-  );
+    expect(result).toBeUndefined();
+    expect(mockWarning).toHaveBeenCalledWith(
+      `The Python version ${version} in .tool-versions is not supported. The Python entry will be ignored.`,
+    );
+  });
 
   it("should return undefined for non-.tool-versions files", async () => {
     const result = await getPythonVersionFromToolVersions(".python-version");
 
@@ -10,6 +10,12 @@ export function getUvVersionFromToolVersions(
   }
 
   const version = stripVersionPrefix(versions[0]);
+  if (isPath(version)) {
+    core.warning(
+      `The uv version ${versions[0]} in .tool-versions is not supported. Paths are not allowed.`,
+    );
+    return undefined;
+  }
   if (version.startsWith("ref")) {
     core.warning(
       "The ref syntax of .tool-versions is not supported. Please use a released version instead.",
@@ -37,7 +43,8 @@ export function getPythonVersionFromToolVersions(
   if (
     version === "system" ||
     version.startsWith("ref:") ||
-    version.startsWith("path:")
+    version.startsWith("path:") ||
+    isPath(version)
   ) {
     core.warning(
       `The Python version ${versions[0]} in .tool-versions is not supported. The Python entry will be ignored.`,
@@ -73,3 +80,7 @@ function getToolVersions(
 function stripVersionPrefix(version: string): string {
   return version.startsWith("v") ? version.slice(1) : version;
 }
+
+function isPath(version: string): boolean {
+  return version.includes("/") || version.includes("\\");
+}