PT-2026-50570 · Vantage6 · Vantage6

Lowbartvanb · CVE-2026-54533 · Published 2026-06-05 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions vantage6 versions prior to 5.0.0

Description Malicious algorithms can potentially access input and output files belonging to other algorithms.

Recommendations Update to version 5.0.0. As a temporary workaround, verify and restrict the algorithm containers that are allowed to run on the node.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-54533

GHSA-X9F6-9RVM-MMRG

PYSEC-2026-3401

Affected Products

Vantage6

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54533.json · Exploit
• https://osv.dev/vulnerability/PYSEC-2026-3401 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-54533 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x9f6-9rvm-mmrg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-54533 · Security Note
• https://github.com/vantage6/vantage6/blob/main/docs/release_notes.rst#500 · Note
• https://github.com/vantage6/vantage6/issues/1932 · Note
• https://github.com/vantage6/vantage6 · Note
• https://github.com/vantage6/vantage6/security/advisories/GHSA-x9f6-9rvm-mmrg · Note
• https://pypi.org/project/vantage6 · Note
• https://t.me/CVEtracker/57196 · Telegram Post
• https://github.com/advisories/GHSA-x9f6-9rvm-mmrg · Note
• https://docs.vantage6.ai/usage/running-the-node/security · Note
• https://t.me/cveNotify/170142 · Telegram Post