CVE-2026-47764: PDM wheel installation leads to Path Traversal via overridden write_to_fs

June 10, 2026

InstallDestination.write_to_fs() in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces the safe _path_with_destdir() (which validates via Path.resolve() + is_relative_to()) with a bare os.path.join() that performs no path validation. A malicious wheel with traversal entries can write arbitrary files. Same class as Poetry CVE-2026-34591. Fix ready at: https://github.com/pdm-project/pdm/pull/3787.

References

github.com/advisories/GHSA-78v8-vpjp-cjqh
github.com/pdm-project/pdm/pull/3787
github.com/pdm-project/pdm/releases/tag/2.27.0
github.com/pdm-project/pdm/security/advisories/GHSA-78v8-vpjp-cjqh
nvd.nist.gov/vuln/detail/CVE-2026-47764

Code Behaviors & Features

Detect and mitigate CVE-2026-47764 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →