CVE-2026-73652
vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can change metadata including the algorithm image or image tag, causing reviewers and nodes to trust a different image from the one originally submitted for approval. No fixed version is available as of this review.
| CWE | CWE-863 |
| Vendor | vantage6 |
| Product | vantage6 |
| Published | Aug 13, 2026 |
| Last Updated | Aug 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for vantage6 vantage6
Be the first to know when new unknown vulnerabilities affecting vantage6 vantage6 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
vantage6 / vantage6
<= 5.0.2