CVE-2026-53942: CWE-94: Improper Control of Generation of Code ('Code Injection') in conda infrastructure
Description
Conda Organization Infrastructure is a centralized location for infrastructure codes. Prior to commit 9c0f238, a GitHub Actions Pwn Request vulnerability appears to remain present in conda/conda. The affected workflow is .github/workflows/update.yml. It is triggered by issue_comment events containing @conda-bot render or @conda-bot recreate. For the render path, the workflow obtains the pull request head repository and branch from the PR API, checks out that PR-controlled repository/ref using secrets.SYNC_TOKEN, and then runs conda/actions/template-files@7f6830b1428a9bd47f0b068892c77eae95207037. The external template-files action reads its default configuration and templates from the checked-out working directory. In the confirmed finding, that action uses an unsandboxed Jinja2 environment to render attacker-controlled template content. This creates a Pwn Request chain in which an untrusted PR/comment path can reach template rendering in a privileged token context. This issue has been patched via commit 9c0f238.
CVSS v3.1
Score 9.9critical
Affected software
conda
infrastructure
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability exists in the conda infrastructure's GitHub Actions workflow (.github/workflows/update.yml) triggered by issue_comment events containing specific bot commands. The workflow checks out the pull request repository and branch using a privileged token and runs an external action that renders templates using Jinja2 without sandboxing. This allows untrusted input from pull requests or comments to execute arbitrary code in the context of the workflow's privileged token. The vulnerability was addressed by a patch in commit 9c0f238.
Potential Impact
An attacker able to trigger the vulnerable workflow via crafted pull request comments can execute arbitrary code with the privileges of the workflow token. This can lead to complete compromise of the infrastructure automation environment, including code execution, data exposure, and disruption of operations. The CVSS score of 9.9 reflects the critical severity and potential for full system compromise.
Mitigation Recommendations
This vulnerability has been patched by the conda project in commit 9c0f238. Users and administrators should update their infrastructure code to include this fix. No further action is required if the patch is applied. If not yet patched, avoid triggering the affected workflow with untrusted input.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-06-11T15:46:12.318Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6adb6fb44d27ba8daa33ac39
Added to database: 10/23/2026, 14:31:16 UTC
Last enriched: 10/23/2026, 14:45:29 UTC
Last updated: 10/23/2026, 15:26:05 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.