{"id":27191,"date":"2026-09-22T00:31:06","date_gmt":"2026-09-21T16:31:06","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-53940"},"modified":"2026-09-22T00:31:06","modified_gmt":"2026-09-21T16:31:06","slug":"cve-2026-53940","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-53940","title":{"rendered":"CVE-2026-53940 [HIGH] &#8211; Conda is a system-level binary package and environment manager that runs on major operatin"},"content":{"rendered":"<p>Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parse_entry_point_def in conda\/common\/path\/python.py accepted an unvalidated entry-point command from a noarch:python package&#8217;s info\/link.json metadata. CreatePythonEntryPointAction in conda\/core\/path_actions.py interpolated that command into target_short_path, and PrefixPathAction.target_full_path joined it to the installation prefix without verifying that the result remained under the intended bin or Scripts directory. create_python_entry_point in conda\/gateways\/disk\/create.py then wrote an executable wrapper to the resulting path. A malicious package could use path separators, traversal segments, or an absolute command path to write outside the prefix or overwrite another in-prefix entry point during default install and environment transactions. Out-of-prefix writes require the target parent directory to exist, while an overwritten entry point can execute attacker-controlled Python when later invoked with the installing user&#8217;s privileges. This issue is fixed in version 26.5.2.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parse_entry_point_def in conda\/common\/path\/python.py accepted an unv<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-27191","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/27191","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=27191"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=27191"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=27191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}