CVE-2026-47764

pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through write_to_fs. InstallDestination.write_to_fs() in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces the safe _path_with_destdir() (which validates via Path.resolve() + is_relative_to()) with a bare os.path.join() that performs no path validation. A malicious wheel with traversal entries can write arbitrary files. This issue has been fixed in version 2.27.0.

CVSS

No CVSS.

References

Link	Resource
https://github.com/pdm-project/pdm/releases/tag/2.27.0
https://github.com/pdm-project/pdm/security/advisories/GHSA-78v8-vpjp-cjqh

Configurations

No configuration.

History

23 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) pdm es un gestor de paquetes y dependencias de Python que soporta los últimos estándares PEP. Las versiones anteriores a la 2.27.0 son vulnerables a un salto de ruta a través de write_to_fs. InstallDestination.write_to_fs() en src/pdm/installers/installers.py anula la clase base para añadir soporte para enlaces simbólicos/enlaces duros, pero reemplaza la función segura _path_with_destdir() (que valida a través de Path.resolve() + is_relative_to()) con un os.path.join() simple que no realiza ninguna validación de ruta. Un wheel malicioso con entradas de salto de ruta puede escribir archivos arbitrarios. Este problema ha sido solucionado en la versión 2.27.0.

Information

Published : 2026-08-04 19:16

Updated : 2026-10-24 16:10

NVD link : CVE-2026-47764

Mitre link : CVE-2026-47764

CVE.ORG link : CVE-2026-47764

JSON object : View

Products Affected

No product.

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-47764", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47764", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-05T13:46:49.682888Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.4, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "pdm-project", "product": "pdm", "versions": [{"status": "affected", "version": "< 2.27.0"}]}]}], "published": "2026-08-04T19:16:51.093", "references": [{"url": "https://github.com/pdm-project/pdm/releases/tag/2.27.0", "source": "security-advisories@github.com"}, {"url": "https://github.com/pdm-project/pdm/security/advisories/GHSA-78v8-vpjp-cjqh", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through write_to_fs. InstallDestination.write_to_fs() in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces the safe _path_with_destdir() (which validates via Path.resolve() + is_relative_to()) with a bare os.path.join() that performs no path validation. A malicious wheel with traversal entries can write arbitrary files. This issue has been fixed in version 2.27.0."}, {"lang": "es", "value": "pdm es un gestor de paquetes y dependencias de Python que soporta los \u00faltimos est\u00e1ndares PEP. Las versiones anteriores a la 2.27.0 son vulnerables a un salto de ruta a trav\u00e9s de write_to_fs. InstallDestination.write_to_fs() en src/pdm/installers/installers.py anula la clase base para a\u00f1adir soporte para enlaces simb\u00f3licos/enlaces duros, pero reemplaza la funci\u00f3n segura _path_with_destdir() (que valida a trav\u00e9s de Path.resolve() + is_relative_to()) con un os.path.join() simple que no realiza ninguna validaci\u00f3n de ruta. Un wheel malicioso con entradas de salto de ruta puede escribir archivos arbitrarios. Este problema ha sido solucionado en la versi\u00f3n 2.27.0."}], "lastModified": "2026-10-24T16:10:00.153", "sourceIdentifier": "security-advisories@github.com"}