CVE-2025-49842 | conda-forge-webservices prior 2025.3.24 conda_forge_webservice Docker Container default permission (GHSA-3cj6-wc22-wvpv)

June 17, 2025 Yanac

A vulnerability, which was classified as critical, has been found in conda-forge-webservices. This issue affects some unknown processing of the component conda_forge_webservice Docker Container. The manipulation leads to incorrect default permissions.

The identification of this vulnerability is CVE-2025-49842. Local access is required to approach this attack. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More