PT-2026-50569 · Pypi+1 · Vantage6

Published 2026-06-05 · Updated 2026-06-17 · CVE-2026-54445

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions vantage6 versions prior to 5.0.0

Description An open-source infrastructure for privacy preserving analysis provides an initial user with the username root and password root. This configuration is insecure as attackers are aware that most servers possess a root user with administrative privileges, and the default password is weak and may not be reset by administrators.

Recommendations Update to version 5.0.0. As a temporary workaround, delete the root user after it has been used to create other users.

Fix

Weakness Enumeration

CWE-204

CWE-1393

Related Identifiers

CVE-2026-54445

GHSA-FGMC-2HQJ-86V4

Affected Products

Vantage6

References · 5

• https://osv.dev/vulnerability/GHSA-fgmc-2hqj-86v4 · Vendor Advisory
• https://github.com/vantage6/vantage6 · Note
• https://github.com/vantage6/vantage6/issues/1932 · Note
• https://github.com/vantage6/vantage6/security/advisories/GHSA-fgmc-2hqj-86v4 · Note
• https://github.com/vantage6/vantage6/blob/main/docs/release_notes.rst#500 · Note