CVE-2026-53956

Name of the Vulnerable Software and Affected Versions rattler cache (affected versions not specified) py-rattler (affected versions not specified)

Description These components are susceptible to package-cache path traversal when processing package metadata from conda channels. During cache materialization, the rattler cache code incorporates the package record build string into a cache key used to construct a filesystem path. A malicious or untrusted channel could provide repodata containing path separators or traversal components within the build field, allowing package contents to be written outside the designated package cache directory. This issue requires the use of an untrusted conda channel, as curated channels typically validate package metadata to prevent malformed build strings.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using untrusted conda channels.