High severityNVD Advisory· Published Aug 13, 2026· Updated Sep 18, 2026
CVE-2026-73652
CVE-2026-73652
Description
vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can change metadata including the algorithm image or image tag, causing reviewers and nodes to trust a different image from the one originally submitted for approval. No fixed version is available as of this review.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
vantage6PyPI | <= 5.0.2 | — |
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.