CyberSecBulletin

Anaconda vulnerabilities

We track 2 vulnerabilities in Anaconda products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 17, 2025.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Anaconda vulnerabilities

  • 7.8 High severity

    Anaconda3: Improper Neutralization of Special Elements used in a Command

    CVE-2024-46060Anaconda

    Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation, world-writable files are created and executed with root privileges. This allows a local low-pr

  • 7.8 High severity

    Anaconda3: Incorrect Permission Assignment for Critical Resource

    CVE-2022-26526Anaconda

    Anaconda Anaconda3 (Anaconda Distribution) through 2021.11.0.0 and Miniconda3 through 4.11.0.0 can create a world-writable directory under %PROGRAMDATA% and place that directory into the system PATH environment variable. Thus, for example, local users can gain