Directory Traversal Vulnerability in Rattler Library by Conda

CVE-2026-47425

What is CVE-2026-47425?

The Rattler library, utilized in the Conda ecosystem for package management, contains a vulnerability where the EntryPoint::FromStr method inadequately sanitizes the command field. This flaw allows a malicious noarch:python package to craft an entry-point name that employs directory traversal sequences, enabling unauthorized write access outside the intended directory structure. As a result, critical files may be overwritten or created outside the designated install prefix, posing a significant security threat during the installation of packages. Version 0.43.2 and above mitigate this vulnerability effectively.

References