conda pixi/rattler/rattler-build/py-rattler up to 0.43.1 EntryPoint EntryPoint::FromStr command path traversal

Summaryinfo

A vulnerability categorized as critical has been discovered in conda pixi, rattler, rattler-build and py-rattler up to 0.43.1. This affects the function EntryPoint::FromStr of the component EntryPoint. Executing a manipulation of the argument command can lead to path traversal. The identification of this vulnerability is CVE-2026-47425. The attack may be launched remotely. There is no exploit available.

Detailsinfo

A vulnerability was found in conda pixi, rattler, rattler-build and py-rattler up to 0.43.1. It has been declared as critical. This vulnerability affects the function EntryPoint::FromStr of the component EntryPoint. The manipulation of the argument command with an unknown input leads to a path traversal vulnerability. The CWE definition for the vulnerability is CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, `EntryPoint::FromStr` in `rattler_conda_types` performs only `.trim()` on the `command` field before the linker joins it onto the install prefix and writes an executable Python script. A malicious `noarch:python` package can ship an `info/link.json` with an entry-point name containing `..`, `/`, `\`, or an absolute path; the resulting file is written outside the prefix (or clobbers an existing in-prefix entry-point such as `bin/pip`) with mode `0o775` on Unix and a copied launcher `.exe` on Windows. This affects the default install path of `pixi install`, `mamba install` via py-rattler, `rattler-build`, and any other consumer of the `rattler` install crate; no flag or post-link-script opt-in is involved. Version 0.43.2 contains a fix for the issue.

The advisory is shared for download at github.com. This vulnerability was named CVE-2026-47425 since 05/19/2026. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1006.

Upgrading to version 0.43.2 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• conda

Name

• pixi
• py-rattler
• rattler
• rattler-build

Version

• 0.43.0
• 0.43.1

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion