CVE-2025-32799 Conda-build Vulnerable to Path Traversal via Malicious Tar File

🗓️ 16 Jun 2025 20:23:02Reported by GoogleType

osv

osv🔗 osv.dev👁 4 Views

Conda-build pre-25.4.0 is vulnerable to path traversal attacks allowing arbitrary file access and execution.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-32799	16 Jun 202520:37	–	circl
CNNVD	Conda-build 路径遍历漏洞	16 Jun 202500:00	–	cnnvd
CVE	CVE-2025-32799	16 Jun 202520:23	–	cve
Cvelist	CVE-2025-32799 Conda-build Vulnerable to Path Traversal via Malicious Tar File	16 Jun 202520:23	–	cvelist
EUVD	EUVD-2025-18459	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 42 Update: conda-build-25.4.0-1.fc42	17 Dec 202501:32	–	fedora
Tenable Nessus	Fedora 42 : conda-build (2025-eb0eab6793)	17 Dec 202500:00	–	nessus
NVD	CVE-2025-32799	16 Jun 202521:15	–	nvd
OpenVAS	Fedora: Security Advisory (FEDORA-2025-eb0eab6793)	17 Dec 202500:00	–	openvas
Positive Technologies	PT-2025-25587 · Unknown · Conda-Build	16 Jun 202500:00	–	ptsecurity

Source	Link
github	www.github.com/conda/conda-build/blob/834448b995eee02cf1c2e7ca97bcfa9affc77ee5/conda_build/convert.py
github	www.github.com/conda/conda-build/blob/834448b995eee02cf1c2e7ca97bcfa9affc77ee5/conda_build/render.py
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32799.json
github	www.github.com/conda/conda-build/security/advisories/GHSA-h499-pxgj-qh5h
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-32799
github	www.github.com/conda/conda-build/commit/bdf5e0022cec9a0c1378cca3f2dc8c92b4834673

10 Apr 2026 05:26Current

7.9High risk

Vulners AI Score7.9

CVSS 46.1

EPSS0.01265

conda-build vulnerability path traversal arbitrary file access privilege escalation code execution patch available