PatchTheCVEanaconda vulnerabilities
Recent CVEs affecting anaconda products. 6 tracked.
anaconda has 6 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-01-16. Highest priority: CVE-2025-32799 (score 62/100).
- CVE-2024-46060 HIGH 7.8 UPGRADE Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed
- CVE-2026-23528 MEDIUM 6.1 UPGRADE Dask distributed is a distributed task scheduler for Dask
- CVE-2025-32800 CRITICAL 9.8 UPGRADE Conda-build contains commands and tools to build conda packages
- CVE-2025-32799 CRITICAL 9.8 UPGRADE Conda-build contains commands and tools to build conda packages
- CVE-2025-32798 CRITICAL 9.8 UPGRADE Conda-build contains commands and tools to build conda packages
- CVE-2025-32797 HIGH 7.0 UPGRADE Conda-build contains commands and tools to build conda packages
FAQ
How do I fix anaconda vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is anaconda being exploited right now?
None of the tracked anaconda CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which anaconda CVE should I patch first?
CVE-2025-32799 currently ranks highest (62/100): Conda-build contains commands and tools to build conda packages.