CVE-2025-32797

CVE-2025-32797 is a race condition vulnerability in conda-build versions prior to 25.3.1, affecting anaconda conda_build. The write_build_scripts function creates temporary build scripts with overly permissive 0o766 permissions, allowing attackers with filesystem access to overwrite the script before execution. This enables arbitrary code execution under the victim's privileges, posing a significant risk in shared environments and potentially leading to full system compromise. With a CVSS score of 7.0 (HIGH), the attack vector is local with high attack complexity, but requires low privileges and no user interaction, leading to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.