CVE-2025-47273

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

Setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker can write files to arbitrary locations on the filesystem.

Risk Assessment

An attacker could overwrite critical system or configuration files, potentially leading to remote code execution or privilege escalation.

Recommendation

Upgrade setuptools to version 78.1.1 or later.

Original NVD description (English source)

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with