CVE-2026-47425
Received Received - Intake

Path Traversal in Rattler Library

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: GitHub, Inc.

Description
Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, `EntryPoint::FromStr` in `rattler_conda_types` performs only `.trim()` on the `command` field before the linker joins it onto the install prefix and writes an executable Python script. A malicious `noarch:python` package can ship an `info/link.json` with an entry-point name containing `..`, `/`, `\`, or an absolute path; the resulting file is written outside the prefix (or clobbers an existing in-prefix entry-point such as `bin/pip`) with mode `0o775` on Unix and a copied launcher `.exe` on Windows. This affects the default install path of `pixi install`, `mamba install` via py-rattler, `rattler-build`, and any other consumer of the `rattler` install crate; no flag or post-link-script opt-in is involved. Version 0.43.2 contains a fix for the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-21
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-47425
EUVD
EUVD-2026-46348

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
conda rattler 0.43.2
conda py-rattler to 0.23.2 (exc)
conda cargo_rattler to 0.43.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
CWE-73 The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-47425 is a path traversal vulnerability in the Rattler library, which is part of the conda ecosystem. The issue occurs in the EntryPoint::FromStr function in rattler_conda_types, where the command field is only trimmed before being joined to the install prefix. This allows malicious noarch:python packages to include path traversal sequences like .., /, \, or absolute paths in entry-point names. As a result, files can be written outside the intended installation directory or overwrite existing files such as bin/pip.

Detection Guidance

Check installed versions of rattler, py-rattler, or cargo_rattler. Run commands like 'rattler --version' or 'pip show py-rattler' to verify if versions are below 0.43.2. Inspect Python package entry points in installed conda environments for suspicious paths containing '..', '/', '\', or absolute paths.

Impact Analysis

This vulnerability can lead to arbitrary file writes outside the expected installation directory. Attackers could overwrite critical system files, install malicious executables, or disrupt the functionality of tools like pip or other entry points. It affects default install paths used by tools such as pixi install, mamba install via py-rattler, and rattler-build, without requiring any specific flags or opt-ins.

Compliance Impact

This vulnerability could lead to unauthorized file writes outside intended directories, potentially compromising system integrity and sensitive data. For GDPR, it may risk unauthorized access to personal data if files containing such data are overwritten or created maliciously. For HIPAA, it could allow manipulation of protected health information files if they are targeted by path traversal. Compliance may be affected if the vulnerability enables data breaches or unauthorized system modifications.

Mitigation Strategies

Upgrade rattler to version 0.43.2 or later. Update py-rattler and cargo_rattler to compatible versions. Remove any suspicious noarch:python packages with malformed entry points. Monitor filesystem writes outside expected directories during package installations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47425. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart