PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-controlled file in an untrusted repository checkout to execute arbitrary Python code before any command is parsed. This happens because load_plugins() runs during Core.init() and adds .pdm-plugins via site.addsitedir(), which processes .pth files and immediately executes any line beginning with import, so the code runs with the privileges of the user invoking pdm and even a benign command such as pdm --version triggers it (making the impact strongest in CI, automation, and privileged contexts). The issue is fixed in version 2.27.0.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically     loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-     controlled file in an untrusted repository checkout to execute arbitrary Python code before any command is     parsed. This happens because load_plugins() runs during Core.init() and adds .pdm-plugins via     site.addsitedir(), which processes .pth files and immediately executes any line beginning with import, so     the code runs with the privileges of the user invoking pdm and even a benign command such as pdm --version     triggers it (making the impact strongest in CI, automation, and privileged contexts). The issue is fixed     in version 2.27.0. (CVE-2026-47781)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21161-1 advisory.

    Changes in python-pdm:

    - CVE-2026-47763: Do not follow symlinks when writing config files (bsc#1268384)
    - CVE-2026-47763: Do not write to paths outside the scheme dir (bsc#1268385)
    - CVE-2026-47781: Update plugin installation path to use project_plugins_dir (bsc#1268386)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically
    loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-
    controlled file in an untrusted repository checkout to execute arbitrary Python code before any command is
    parsed. This happens because load_plugins() runs during Core.init() and adds .pdm-plugins via
    site.addsitedir(), which processes .pth files and immediately executes any line beginning with import, so
    the code runs with the privileges of the user invoking pdm and even a benign command such as pdm --version
    triggers it (making the impact strongest in CI, automation, and privileged contexts). The issue is fixed
    in version 2.27.0. (CVE-2026-47781)

ID	Name	Product	Family	Type	Severity
332064	Linux Distros Unpatched Vulnerability : CVE-2026-47781	Nessus	Misc.	Local	high
324056	openSUSE 16 Security Update : python-pdm (openSUSE-SU-2026:21161-1)	Nessus	SuSE Local Security Checks	Local	high
443069	SCA: security update for pdm (GHSA-qq6c-99pv-prvf)	Tenable Cloud Security	SCA Checks	Local	high
443069	SCA: security update for pdm (GHSA-qq6c-99pv-prvf)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-47781

high

Tenable Plugins

high

high

high

high