GitHub Advisoryadvisory · PyPI
GHSA-x9f6-9rvm-mmrg vantage6 node has an Improper Access Control issue
MEDIUM
Official page ↗
- Aliases
- CVE-2026-54533
- Ecosystem
- PyPI
- Packages
- vantage6
- Severity
- Moderate
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
- Weaknesses
- CWE-284
- Reviewed
- 2026-06-05
Affected packages
• PyPI vantage6: < 5.0.0 → fixed in 5.0.0
Description
Impact
Malicious algorithms can potentially access other algorithms input and output files.
Patches
Todo
Workarounds
Verify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this.
References
https://docs.vantage6.ai/usage/running-the-node/security
For more information
If you have any questions or comments about this advisory:
• Email us at [email protected]
Related
Alias · CVE (1)
- CVE-2026-54533 vantage6 is an open-source infrastructure for privacy preserving analysis. vulnerability
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://github.com/vantage6/vantage6/security/advisories/GHSA-x9f6-9rvm-mmrg web
- https://nvd.nist.gov/vuln/detail/CVE-2026-54533 advisory
- https://github.com/vantage6/vantage6/issues/1932 web
- https://docs.vantage6.ai/usage/running-the-node/security web
- https://github.com/vantage6/vantage6 package
- https://github.com/vantage6/vantage6/blob/main/docs/release_notes.rst#500 web