{"id":"CVE-2026-47425","aliases":["GHSA-q53q-5r4j-5729","PYSEC-2026-2971"],"title":"rattler has an entry-point path traversal in noarch:python install (arbitrary file write)","summary":"rattler has an entry-point path traversal in noarch:python install (arbitrary file write)","severity":"medium","vendor":"rattler","product":"rattler","ecosystem":"rust","affected":["rattler < 0.43.2","py-rattler < 0.24.0"],"patched":["rattler 0.43.2","py-rattler 0.24.0"],"published":"2026-06-01","updated":"2026-07-13","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-q53q-5r4j-5729","references":[{"url":"https://github.com/conda/rattler/security/advisories/GHSA-q53q-5r4j-5729"},{"url":"https://github.com/conda/rattler/pull/2445"},{"url":"https://github.com/conda/rattler"}],"tags":["osv","rust"],"ingestedAt":"2026-07-13T18:58:01.793Z","epss":0.00196,"epssPercentile":0.09549,"slug":"CVE-2026-47425","body":"## Overview\n\n## Summary\n\n`EntryPoint::FromStr` in `rattler_conda_types` performs only `.trim()` on the `command` field before the linker joins it onto the install prefix and writes an executable Python script. A malicious `noarch:python` package can ship an `info/link.json` with an entry-point name containing `..`, `/`, `\\`, or an absolute path; the resulting file is written outside the prefix (or clobbers an existing in-prefix entry-point such as `bin/pip`) with mode `0o775` on Unix and a copied launcher `.exe` on Windows. This affects the default install path of `pixi install`, `rattler-build`, some methods in `py-rattler`, and any other consumer of the `rattler` install crate; no flag or post-link-script opt-in is involved.\n\nResolved in https://github.com/conda/rattler/pull/2445, released in rattler 0.43.2.\n\n## Affected\n\n- Repository: https://github.com/conda/rattler\n- Commit: `a0e61a33da8b9d6de712fab2a879fa9da977e6e3` (HEAD at audit time, 2026-05-13 release)\n- Downstream consumers reached through the same code path: `prefix-dev/pixi` @ `e640477`\n- pixi 0.69.0 and rattler-build 0.65.0 fix this issue\n\n## Researcher\n\nBerkant Koc <me@berkoc.com>\nPGP: 0C588DFD76204987284213EA0AC529C41F8AA5D6\n\n## Affected packages\n\n- `rattler < 0.43.2`\n- `py-rattler < 0.24.0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `rattler 0.43.2`\n- `py-rattler 0.24.0`","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":27.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}