CVE-2025-35471CWE-427

conda-forge openssl-feedstock writable OPENSSLDIR

High · published May 13, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
12.9
In the wild
Unconfirmed
What it is

conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary code with the privileges of the user or process loading openssl-feedstock DLLs. Miniforge before 24.5.0 is also affected.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00229 · 12.9th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2025-05-13T01:13Z
EPSS history
Timeline
  • 13 MAY 01:13Z
    conda-forge openssl-feedstock writable OPENSSLDIR
    cvelistv5