CVE-2026-47425

Summary

Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, EntryPoint::FromStr in rattler_conda_types performs only .trim() on the command field before the linker joins it onto the install prefix and writes an executable Python script. A malicious noarch:python package can ship an info/link.json with an entry-point name containing .., /, \, or an absolute path; the resulting file is written outside the prefix (or clobbers an existing in-prefix entry-point such as bin/pip) with mode 0o775 on Unix and a copied launcher .exe on Windows. This affects the default install path of pixi install, mamba install via py-rattler, rattler-build, and any other consumer of the rattler install crate; no flag or post-link-script opt-in is involved. Version 0.43.2 contains a fix for the issue.

Affected Software

VendorProductVersion RangeStatus
condarattler< 0.43.2affected
condapy-rattler< 0.24.0affected
condarattler-build< 0.65.0affected
prefix-devpixi< 0.69.0affected

Weaknesses

  • CWE-22: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
  • CWE-73: CWE-73: External Control of File Name or Path

References