Is CVE-2025-32799 actively exploited?

No active exploitation of CVE-2025-32799 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-32799 be exploited remotely?

Yes. CVE-2025-32799 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2025-32799?

CVE-2025-32799 has a CVSS score of 9.8 (CRITICAL).

HOME VULNERABILITIESCVE-2025-32799

CRITICAL

CVE-2025-32799

CWE-22Published: June 16, 2025· Updated: Jun 17, 2026

9.8

CVSS v3.1

Official Description

Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build processing logic is vulnerable to path traversal (Tarslip) attacks due to improper sanitization of tar entry paths. Attackers can craft tar archives containing entries with directory traversal sequences to write files outside the intended extraction directory. This could lead to arbitrary file overwrites, privilege escalation, or code execution if sensitive locations are targeted. This issue has been patched in version 25.4.0.

NVD Source

Risk Analysis

Conda-build versions prior to 25.4.0 are vulnerable to a path traversal (Tarslip) attack during archive extraction. This allows attackers to overwrite arbitrary files on the system, resulting in a critical 9.8 CVSS score.

No public exploit is known, and it is not in the KEV catalog. The vulnerability is remotely exploitable.

Recommended Action

Upgrade to conda-build version 25.4.0 to receive the fix for tar entry path sanitization.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2025-32799 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.8.