CVE-2026-53956

MediumCVSS 5.4

Published: 09/09/2026(UTC)Updated: 10/09/2026(UTC)Translated: 10/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

The rattler_cache (before 0.9.0) and py-rattler (before 0.24.0) libraries are vulnerable to package-cache path traversal when handling package metadata from conda channels. A malicious channel can publish repodata with path separators in the build field, causing files to be written outside the cache directory.

Risk Assessment

Using an untrusted conda channel can lead to overwriting files outside the cache directory, potentially allowing an attacker to modify the system or escalate privileges. The issue requires interaction with an untrusted channel.

Recommendation

Upgrade rattler_cache to version 0.9.0 or py-rattler to 0.24.0. Avoid using untrusted conda channels.

Other vulnerabilities in Rattler

CVE-2026-47425Medium
In Rattler before version 0.43.2, the EntryPoint::FromStr function does not properly validate the entry point name, allowing file writes outside the installation prefix. A malicious noarch:python package can place an executable file anywhere, e.g., overwriting an existing entry point.

Original NVD description (English source)

Rattler is a library that provides common functionality used within the conda ecosystem. `rattler_cache` prior to version 0.9.0 and `py-rattler` prior to version 0.24.0 were vulnerable to package-cache path traversal when handling package metadata from conda channels. During cache materialization, the `ratter_cache` code used the package record `build` string as part of a cache key that was joined into a filesystem path. A malicious or untrusted channel could publish repodata with path separators or traversal components in that field, causing package contents to be written outside the configured package cache directory. The issue requires use of a malicious or otherwise untrusted conda channel. Curated channels that validate package metadata are not expected to allow malformed build strings of this form. Users should upgrade to `rattler_cache` version 0.9.0 or `py-rattler` version 0.24.0 and avoid untrusted conda channels.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS