Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-53942— Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN

Quick assessment

Affected
conda infrastructure
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Conda 组织的基础设施代码集中托管在 Conda Organization Infrastructure 中。在提交 9c0f238 之前，conda/conda 项目中似乎仍存在一个 GitHub Actions“劫持请求”（Pwn Request）漏洞。受影响的流程为 ，该流程由包含 或 的 issue_comment 事件触发。 在 路径中，该工作流会通过 PR API 获取拉取请求（PR）的目标仓库和分支，随后使用 检出该由 PR 控制的仓库/引用，并执行 。该外部 动作会从已检出的工作目录中读取其默认

CVSS 9.9 · Critical

Affected Version Matrix 1

VendorProduct Version RangeStatus
conda infrastructure < 9c0f23857282ff5cf7a6b3ad6bf0dd6f9974be55 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-53942

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN
Source: CVE Program / CVE List V5
Vulnerability Description
Conda Organization Infrastructure is a centralized location for infrastructure codes. Prior to commit 9c0f238, a GitHub Actions Pwn Request vulnerability appears to remain present in conda/conda. The affected workflow is .github/workflows/update.yml. It is triggered by issue_comment events containing @conda-bot render or @conda-bot recreate. For the render path, the workflow obtains the pull request head repository and branch from the PR API, checks out that PR-controlled repository/ref using secrets.SYNC_TOKEN, and then runs conda/actions/template-files@7f6830b1428a9bd47f0b068892c77eae95207037. The external template-files action reads its default configuration and templates from the checked-out working directory. In the confirmed finding, that action uses an unsandboxed Jinja2 environment to render attacker-controlled template content. This creates a Pwn Request chain in which an untrusted PR/comment path can reach template rendering in a privileged token context. This issue has been patched via commit 9c0f238.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
conda infrastructure < 9c0f23857282ff5cf7a6b3ad6bf0dd6f9974be55 -

II. Public POCs for CVE-2026-53942

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-53942

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-53942 (1)

Vendor Advisories for CVE-2026-53942 (1)

IV. Related Vulnerabilities

Same product: infrastructure
Same vendor: conda
Same weakness: CWE-94

V. Comments for CVE-2026-53942

No comments yet

Leave a comment