Read the docs
TI-2026-38923 Aliases CVE-2026-53956GHSA-h672-p7h7-97v9

Rattler vulnerable to package cache path traversal via conda package build string

Priority LOW 24CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.

Summary

Rattler is a library that provides common functionality used within the conda ecosystem. `rattler_cache` prior to version 0.9.0 and `py-rattler` prior to version 0.24.0 were vulnerable to package-cache path traversal when handling package metadata from conda channels. During cache materialization, the `ratter_cache` code used the package record `build` string as part of a cache key that was joined into a filesystem path. A malicious or untrusted channel could publish repodata with path separators or traversal components in that field, causing package contents to be written outside the configured package cache directory. The issue requires use of a malicious or otherwise untrusted conda channel. Curated channels that validate package metadata are not expected to allow malformed build strings of this form. Users should upgrade to `rattler_cache` version 0.9.0 or `py-rattler` version 0.24.0 and avoid untrusted conda channels.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0033 26th percentileScored 2026-11-07
Fix Fixed rattler_cache (conda): 0.9.0py-rattler (conda): 0.24.0+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
condarattler_cachebefore 0.9.00.9.0Patch availableCNA
condapy-rattlerbefore 0.24.00.24.0Patch availableCNA
—rattler_cache (crates.io)before 0.9.00.9.0Patch availableGHSA-h672-p7h7-97v9
—py_rattler (PyPI)before 0.24.00.24.0Patch availableGHSA-h672-p7h7-97v9
  • rattler_cache Vendorconda Affected before 0.9.0 Fixed in 0.9.0 Patch available CNA
  • py-rattler Vendorconda Affected before 0.24.0 Fixed in 0.24.0 Patch available CNA
  • rattler_cache (crates.io) Vendor— Affected before 0.9.0 Fixed in 0.9.0 Patch available GHSA-h672-p7h7-97v9
  • py_rattler (PyPI) Vendor— Affected before 0.24.0 Fixed in 0.24.0 Patch available GHSA-h672-p7h7-97v9

Remediation

  • Fix · CNA rattler_cache (conda) Fixed in 0.9.0
  • Fix · CNA py-rattler (conda) Fixed in 0.24.0
  • Fix · GHSA-h672-p7h7-97v9 rattler_cache (crates.io) Fixed in 0.9.0 Advisory →
  • Fix · GHSA-h672-p7h7-97v9 py_rattler (PyPI) Fixed in 0.24.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-53956
  2. 2026-10-03 Alias added: GHSA-h672-p7h7-97v9

References

Other 2

  • TI-2026-38909 Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation CVSS 3.1HIGH 8.8
  • TI-2025-23835 Conda-build Allows Arbitrary Code Execution via Malicious Recipe Selectors CVSS 4.0HIGH 8.2
  • TI-2025-23836 Conda-build Vulnerable to Path Traversal via Malicious Tar File CVSS 4.0MEDIUM 5.6
  • TI-2026-79928 Pwn request in Conda infrastructure workflow exposes SYNC_TOKEN CVSS 3.1CRITICAL 9.9
  • TI-2025-39776 (conda) Constructor: Excessive permissions during and after installation CVSS 3.1HIGH 7.8
  • TI-2025-23837 Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI CVSS 4.0HIGH 7.2
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences