The rattler library used in the conda ecosystem has a path traversal vulnerability in versions before 0.43.2. Specifically, the EntryPoint::FromStr function in rattler_conda_types only trims whitespace from the command field without properly sanitizing it. A malicious noarch:python package can craft an info/link.json entry-point name containing path traversal characters (e.g., '..', '/', '\', or absolute paths). This causes the installation process to write executable files outside the intended prefix directory or overwrite existing executables such as bin/pip. The vulnerability affects default install paths of pixi install, mamba install via py-rattler, rattler-build, and any other consumers of the rattler install crate. Version 0.43.2 contains a fix that prevents this issue.

Successful exploitation allows an attacker to write or overwrite executable files outside the intended installation directory with mode 0o775 on Unix or as a copied launcher .exe on Windows. This can lead to arbitrary code execution or privilege escalation within the affected environment. The vulnerability does not require user interaction or privileges and can be triggered by installing a malicious package.

Version 0.43.2 of rattler contains a fix for this vulnerability. Users and maintainers should upgrade to version 0.43.2 or later to remediate the issue. No additional flags or post-link script opt-ins are required. Patch status is not explicitly stated as 'official-fix' in the advisory, but the fixed version is clearly identified. Users should verify upgrade to >=0.43.2. No known exploits are reported in the wild at this time.