CLEANSTART-2026-RI07677: Security fix for CVE-2026-3446 applied in: miniforge3 25.11.0.1-r6

Q: What does an attacker need to exploit this issue?

The available vector indicates network access, low privileges, high attack complexity, and additional attack requirements are needed. No user interaction is required.

Q: How can I remediate the issue?

Update the cleanstart/miniforge3 package to a release containing the fix. The fix is applied in miniforge3 25.11.0.1-r6, and the issue is resolved in later releases.

Published Nov 14, 2026

Updated

Security vulnerability affects the miniforge3 package. This issue is resolved in later releases. See references for vulnerability details.

Affected Software

1 affected componentFixes available

cleanstart/miniforge3<25.11.0.1-r6

25.11.0.1-r6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/miniforge3 to a version that resolves this vulnerability.
Fixed in 25.11.0.1-r6
Upgrade
Upgrade miniforge3 to a version that resolves this vulnerability.
Fixed in 25.11.0.1-r6

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-3446

Frequently Asked Questions

What does an attacker need to exploit this issue?

The available vector indicates network access, low privileges, high attack complexity, and additional attack requirements are needed. No user interaction is required.

How can I remediate the issue?