A vulnerability, which was classified as critical, was found in conda-forge miniforge and openssl-feedstock. This affects an unknown part of the file openssl.cnf. The manipulation of the argument OPENSSLDIR leads to uncontrolled search path.
This vulnerability is uniquely identified as CVE-2025-35471. It is possible to launch the attack on the local host. There is no exploit available.
It is recommended to upgrade the affected component.
