7.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-47764

CVE-2026-47764: PDM wheel installation leads to Path Traversal via overridden write_to_fs

InstallDestination.write_to_fs() in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces the safe _path_with_destdir() (which validates via Path.resolve() + is_relative_to()) with a bare os.path.join() that performs no path validation. A malicious wheel with traversal entries can write arbitrary files. Same class as Poetry CVE-2026-34591. Fix ready at: https://github.com/pdm-project/pdm/pull/3787.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-47764

CVE-2026-47764:

7.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
pdm	pip	<= 2.22.4	2.27.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the write_to_fs method of the InstallDestination class in src/pdm/installers/installers.py. The method was responsible for writing files during the installation of a wheel package. The vulnerability was introduced because the method used os.path.join() to construct the target file path. This function is known to be unsafe when dealing with untrusted input, as it does not prevent path traversal attacks (e.g., using ../). An attacker could craft a malicious wheel file with specially crafted file paths that, when installed, would write files outside the intended package installation directory. The fix, as seen in commit 24b8f457899c772f7801e2ba668e293ebaff46df, replaces the vulnerable os.path.join() call with self._path_with_destdir(scheme, path). This corrected method properly validates the path to ensure it remains within the designated installation directory, thus mitigating the path traversal vulnerability.

Vulnerable functions

InstallDestination.write_to_fs

src/pdm/installers/installers.py

The function `write_to_fs` in the `InstallDestination` class was vulnerable to a path traversal attack. It used `os.path.join()` to construct the destination path for a file from a wheel package. A malicious wheel could contain a file with a path like `../../../../tmp/pwned` which would cause `os.path.join()` to create a path outside of the intended installation directory, allowing arbitrary file writes. The patch replaces the unsafe `os.path.join()` with `self._path_with_destdir(scheme, path)`, which performs validation to prevent path traversal.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.