CVE-2026-46699

{
  "id": "CVE-2026-46699",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-18T21:16:29.053",
  "lastModified": "2026-10-26T11:10:00.157",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.61.0, a vulnerability in the conda-forge automated webservices allowed unintended write access to feedstock repositories through GitHub username takeover. The root cause is the use of mutable GitHub usernames as identifiers for repository invitation routing, rather than stable, immutable GitHub user IDs. Version 3.61.0 fixes the issue."
    },
    {
      "lang": "es",
      "value": "conda-smithy es una herramienta para combinar una receta conda con configuraciones para construir utilizando servicios de CI alojados gratuitamente en un único repositorio. Antes de la versión 3.61.0, una vulnerabilidad en los servicios web automatizados de conda-forge permitía acceso de escritura no intencionado a los repositorios feedstock a través de la toma de control de nombres de usuario de GitHub. La causa raíz es el uso de nombres de usuario de GitHub mutables como identificadores para el enrutamiento de invitaciones a repositorios, en lugar de IDs de usuario de GitHub estables e inmutables. La versión 3.61.0 soluciona el problema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "conda-forge",
          "product": "conda-smithy",
          "versions": [
            {
              "version": "< 3.61.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
          "baseScore": 7.6,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "HIGH",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 4.7
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-22T12:42:52.070765Z",
          "id": "CVE-2026-46699",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/conda-forge/conda-smithy/commit/3b0bcd92ebd6f41edd341401d84583a20911c587",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/conda-forge/conda-smithy/security/advisories/GHSA-g95q-3cmj-fvh8",
      "source": "[email protected]"
    }
  ]
}