CVE-2024-46060

Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation, world-writable files are created and executed with root privileges. This allows a local low-privileged user to inject arbitrary commands, leading to code execution as the root user.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://m8sec.dev/blog/privilege-escalation-macos-pkg-installers/	Exploit Third Party Advisory
https://www.anaconda.com/docs/getting-started/anaconda/release/2024.x#anaconda-2024-06-1	Release Notes

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:anaconda:anaconda3:*:*:*:*:*:*:*:*

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

History

26 Sep 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Los instaladores de Anaconda3 para macOS anteriores a la versión 2024.06-1 contienen una vulnerabilidad de escalada de privilegios local cuando se instalan fuera del directorio de inicio del usuario. Durante la instalación, se crean archivos con permisos de escritura para todos (world-writable) y se ejecutan con privilegios de root. Esto permite a un usuario local con pocos privilegios inyectar comandos arbitrarios, lo que lleva a la ejecución de código como usuario root.

Information

Published : 2025-12-17 19:16

Updated : 2026-09-26 21:10

NVD link : CVE-2024-46060

Mitre link : CVE-2024-46060

CVE.ORG link : CVE-2024-46060

JSON object : View

Products Affected

apple

macos

anaconda

anaconda3

CWE

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CWE-732

Incorrect Permission Assignment for Critical Resource

{"id": "CVE-2024-46060", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-46060", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-18T16:05:02.709210Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-12-17T19:16:00.160", "references": [{"url": "https://m8sec.dev/blog/privilege-escalation-macos-pkg-installers/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.anaconda.com/docs/getting-started/anaconda/release/2024.x#anaconda-2024-06-1", "tags": ["Release Notes"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-77"}, {"lang": "en", "value": "CWE-732"}]}], "descriptions": [{"lang": "en", "value": "Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation, world-writable files are created and executed with root privileges. This allows a local low-privileged user to inject arbitrary commands, leading to code execution as the root user."}, {"lang": "es", "value": "Los instaladores de Anaconda3 para macOS anteriores a la versi\u00f3n 2024.06-1 contienen una vulnerabilidad de escalada de privilegios local cuando se instalan fuera del directorio de inicio del usuario. Durante la instalaci\u00f3n, se crean archivos con permisos de escritura para todos (world-writable) y se ejecutan con privilegios de root. Esto permite a un usuario local con pocos privilegios inyectar comandos arbitrarios, lo que lleva a la ejecuci\u00f3n de c\u00f3digo como usuario root."}], "lastModified": "2026-09-26T21:10:00.130", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:anaconda:anaconda3:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CC282C6-F514-468E-BEF3-1E52AD01A700", "versionEndExcluding": "2024.06-1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}