CVE-2026-53940
Description
A flaw was found in Conda, a system-level binary package and environment manager. An unvalidated entry-point command in a noarch:python package's metadata allows a malicious package to use path traversal. This enables writing files outside the intended installation directory or overwriting existing entry points. Consequently, an attacker could execute arbitrary code with the privileges of the installing user.
Statement
This vulnerability is rated as an Important severity because successful exploitation permits arbitrary file overwrite and subsequent code execution under the privileges of the executing user. While Conda is not shipped as a default core component in Red Hat Enterprise Linux and is primarily available via community channels such as EPEL, systems where users install third-party Conda packages are exposed. Exploitation requires user interaction to install a specially crafted package from an untrusted source.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
