{"id":"CVE-2026-47764","title":"pdm is a Python package and dependency manager supporting the latest PEP standards","summary":"pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through write_to_fs. InstallDestination.write_to_fs() in src/pdm/installers/installers.py overr…","severity":"high","cwe":["CWE-22"],"vendor":"pdm","product":"pdm","affected":["pdm <= 2.22.4"],"patched":["pdm 2.27.0"],"published":"2026-08-04","updated":"2026-09-08","sourceUpdated":"2026-09-08T20:51:43.490","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-47764","references":[{"url":"https://github.com/pdm-project/pdm/releases/tag/2.27.0","label":"security-advisories@github.com"},{"url":"https://github.com/pdm-project/pdm/security/advisories/GHSA-78v8-vpjp-cjqh","label":"security-advisories@github.com"},{"url":"https://github.com/pdm-project/pdm/pull/3787"},{"url":"https://github.com/advisories/GHSA-78v8-vpjp-cjqh"}],"tags":["nvd","ghsa","pip"],"epss":0.00148,"epssPercentile":0.04394,"aliases":["GHSA-78v8-vpjp-cjqh"],"ecosystem":"pip","ingestedAt":"2026-07-07T15:41:59.533Z","slug":"CVE-2026-47764","body":"## Overview\n\npdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through write_to_fs. InstallDestination.write_to_fs() in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces the safe _path_with_destdir() (which validates via Path.resolve() + is_relative_to()) with a bare os.path.join() that performs no path validation. A malicious wheel with traversal entries can write arbitrary files. This issue has been fixed in version 2.27.0.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-47764)\n\nAffected packages:\n\n- `pdm <= 2.22.4`\n\nPatched in:\n\n- `pdm 2.27.0`\n\nSource: https://github.com/advisories/GHSA-78v8-vpjp-cjqh","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}