Conda vulnerabilities
We track 9 vulnerabilities in Conda products across 5 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on October 23, 2026.
Latest Conda vulnerabilities
- 9.9 Critical severity
infrastructure: Improper Control of Generation of Code
Conda Organization Infrastructure is a centralized location for infrastructure codes. Prior to commit 9c0f238, a GitHub Actions Pwn Request vulnerability appears to remain present in conda/conda. The affected workflow is .github/workflows/update.yml. It is tri
- 8.8 High severity
conda: Improper Limitation of a Pathname to a Restricted Directory
Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parse_entry_point_def in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's
- 7.8 High severity
Miniconda3: Improper Neutralization of Special Elements used in a Command
Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation, world-writable files are created and executed with root privileges. This flaw allows a local
- 7.8 High severity
constructor: Authentication Bypass by Alternate Name
(conda) Constructor is a tool that enables users to create installers for conda package collections. In versions 3.12.2 and below, the installation directory inherits permissions from its parent directory. Outside of restricted directories, the permissions are
- 9.8 Critical severity
conda-build: Reliance on Insufficiently Trustworthy Component
Conda-build contains commands and tools to build conda packages. Prior to version 25.3.0, the pyproject.toml lists conda-index as a Python dependency. This package is not published in PyPI. An attacker could claim this namespace and upload arbitrary (malicious
- 9.8 Critical severity
conda-build: Improper Limitation of a Pathname to a Restricted Directory
Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build processing logic is vulnerable to path traversal (Tarslip) attacks due to improper sanitization of tar entry paths. Attackers can craft tar archives conta
- 9.8 Critical severity
conda-build: Improper Control of Generation of Code
Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build recipe processing logic has been found to be vulnerable to arbitrary code execution due to unsafe evaluation of recipe selectors. Currently, conda-build u
- 7.0 High severity
conda-build: Insecure Inherited Permissions
Conda-build contains commands and tools to build conda packages. Prior to version 25.3.1, the write_build_scripts function in conda-build creates the temporary build script conda_build.sh with overly permissive file permissions (0o766), allowing write access t
- 7.8 High severity
Anaconda3: Incorrect Permission Assignment for Critical Resource
Anaconda Anaconda3 (Anaconda Distribution) through 2021.11.0.0 and Miniconda3 through 4.11.0.0 can create a world-writable directory under %PROGRAMDATA% and place that directory into the system PATH environment variable. Thus, for example, local users can gain