PT-2026-60013 · Pypi · Vantage6

Publicado 2026-07-13 · Atualizado 2026-07-13

OSV

CVSS v4.0

6.9

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Impact

Malicious algorithms can potentially access other algorithms input and output files.

Patches

Todo

Workarounds

Verify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this.

References

https://docs.vantage6.ai/usage/running-the-node/security

For more information

If you have any questions or comments about this advisory:

• Email us at [e-mail]

Correção

Identificadores relacionados

PYSEC-2026-3401

Produtos afetados

Vantage6

Referências · 9

• https://github.com/vantage6/vantage6/issues/1932 · Nota
• https://github.com/vantage6/vantage6 · Nota
• https://github.com/vantage6/vantage6/blob/main/docs/release_notes.rst#500 · Nota
• https://github.com/vantage6/vantage6/security/advisories/GHSA-x9f6-9rvm-mmrg · Nota
• https://osv.dev/vulnerability/PYSEC-2026-3401 · Aviso do Fabricante
• https://pypi.org/project/vantage6 · Nota
• https://github.com/advisories/GHSA-x9f6-9rvm-mmrg · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-54533 · Nota de Segurança
• https://docs.vantage6.ai/usage/running-the-node/security · Nota