CVE-2021-42969: Anaconda ANACONDA3

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Certain Anaconda3 2021.05 are affected by OS command injection. When a user installs Anaconda, an attacker can create a new file and write something in usercustomize.py. When the user opens the terminal or activates Anaconda, the command will be executed.

Affected products

• Anaconda ANACONDA3: version 2021.05 only

Published 2022-05-13. Last modified 2026-06-17.