{"id":"CVE-2026-47764","aliases":["GHSA-78v8-vpjp-cjqh","PYSEC-2026-2861"],"url":"https://o3.security/vulnerability/CVE-2026-47764","summary":"pdm: Path traversal in wheel installation via overridden write_to_fs","details":"pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through write_to_fs. InstallDestination.write_to_fs() in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces the safe _path_with_destdir() (which validates via Path.resolve() + is_relative_to()) with a bare os.path.join() that performs no path validation. A malicious wheel with traversal entries can write arbitrary files. This issue has been fixed in version 2.27.0.","published":"2026-08-04T17:57:15.756Z","modified":"2026-08-12T03:51:18.471691598Z","cvss":null,"epss":{"score":0.00148,"percentile":0.04329,"asOf":"2026-09-02"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"pdm","fixedVersion":"2.27.0"}],"fix":null,"references":[{"type":"WEB","url":"https://github.com/pdm-project/pdm/releases/tag/2.27.0"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47764.json"},{"type":"ADVISORY","url":"https://github.com/pdm-project/pdm/security/advisories/GHSA-78v8-vpjp-cjqh"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47764"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-12T03:51:18.471691598Z"}}