PT-2026-29668 · Copier · Copier

Evipepota · Published 2026-04-01 · Updated 2026-04-03 · CVE-2026-34726

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Copier versions prior to 9.14.1

Description Copier's subdirectory setting, intended to specify the template root, incorrectly allows parent directory traversal sequences like ... This allows a template to escape its directory and render files from the parent directory without using the --UNSAFE flag. The vulnerability lies in the lack of validation that the resulting path remains within the template directory. The vulnerable code path involves rendering the subdirectory string and using it directly to construct the template root path. This can lead to the rendering of files from unintended locations, potentially including sensitive data or configuration files in the parent directory.

Recommendations Update Copier to version 9.14.1 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-34726

GHSA-85V3-4M8G-HRH6

Affected Products

Copier

References · 8

• 🔥 https://github.com/copier-org/copier/security/advisories/GHSA-85v3-4m8g-hrh6 · Exploit
• https://github.com/copier-org/copier/commit/cb80a3ffc9c3787de3ed837e04ca29a0ff8ca3df · Patch
• https://osv.dev/vulnerability/GHSA-85v3-4m8g-hrh6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34726 · Security Note
• https://github.com/copier-org/copier/releases/tag/v9.14.1 · Note
• https://github.com/copier-org/copier · Note
• https://twitter.com/CVEnew/status/2040128809702154434 · Twitter Post
• https://twitter.com/infoflowcloud/status/2040130129075065094 · Twitter Post