CVE-2026-47425

MediumCVSS 6.9

Published: 21/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

In Rattler before version 0.43.2, the EntryPoint::FromStr function does not properly validate the entry point name, allowing file writes outside the installation prefix. A malicious noarch:python package can place an executable file anywhere, e.g., overwriting an existing entry point.

Risk Assessment

An attacker can overwrite critical system files or add malicious scripts, leading to full system compromise.

Recommendation

Update Rattler to version 0.43.2 or later. As a workaround, do not run tools using Rattler on untrusted packages.

Other vulnerabilities in Rattler

CVE-2026-53956Medium
The rattler_cache (before 0.9.0) and py-rattler (before 0.24.0) libraries are vulnerable to package-cache path traversal when handling package metadata from conda channels. A malicious channel can publish repodata with path separators in the build field, causing files to be written outside the cache directory.

Original NVD description (English source)

Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, `EntryPoint::FromStr` in `rattler_conda_types` performs only `.trim()` on the `command` field before the linker joins it onto the install prefix and writes an executable Python script. A malicious `noarch:python` package can ship an `info/link.json` with an entry-point name containing `..`, `/`, `\`, or an absolute path; the resulting file is written outside the prefix (or clobbers an existing in-prefix entry-point such as `bin/pip`) with mode `0o775` on Unix and a copied launcher `.exe` on Windows. This affects the default install path of `pixi install`, `mamba install` via py-rattler, `rattler-build`, and any other consumer of the `rattler` install crate; no flag or post-link-script opt-in is involved. Version 0.43.2 contains a fix for the issue.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS