A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content.