CVE-2026-47763 pdm-project CVE debrief

Who should care

Users of pdm versions prior to 2.27.0, developers of Python projects using pdm, and security teams responsible for monitoring and mitigating vulnerabilities in software supply chains should be aware of this vulnerability and take necessary precautions to protect their systems.

Technical summary

The pdm package, a Python package and dependency manager, is vulnerable to a symlink protection bypass issue in versions prior to 2.27.0. This vulnerability allows a malicious repository to overwrite arbitrary files with the privileges of the invoking user, potentially leading to a denial of service or elevation of privileges. The issue arises from the lack of symlink protection when writing project-local state or configuration files. The vulnerability has been fixed in version 2.27.0.

Defensive priority

This vulnerability allows local users to overwrite arbitrary files with the privileges of the invoking user, potentially leading to a denial of service or elevation of privileges.

Recommended defensive actions

• Update pdm to version 2.27.0 or later
• Use symlink protection mechanisms provided by the operating system
• Monitor project-local files for suspicious modifications
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE-2026-47763 issue exists in pdm, a Python package and dependency manager, in versions prior to 2.27.0. The vulnerability arises because pdm writes project-local state or configuration files without symlink protection. A malicious repository can place these files as symlinks, allowing local PDM operations to overwrite the symlink targets, effectively creating an arbitrary file clobber primitive. This issue has been fixed in version 2.27.0.

Official resources