Vulnerability PYSEC-2026-3401
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 months ago
July 13, 2026 at 03:46 PM UTC
vantage6 node has an Improper Access Control issue
0.0.0b0 - 5.0.0rc91
0.0.0b0 - 5.0.0rc91
Summary
vantage6 node has an Improper Access Control issue
Details
Impact
Malicious algorithms can potentially access other algorithms input and output files.
Patches
Todo
Workarounds
Verify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this.
References
https://docs.vantage6.ai/usage/running-the-node/security
For more information
If you have any questions or comments about this advisory:
- Email us at [email protected]
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
2 months ago
vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
0.0.0b0 - 5.0.2 PYSEC-2026-3703
0.0.0b0 - 5.0.2 PYSEC-2026-3703
High Risk
3 months ago
vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
0.0.0b0 - 5.0.2 GHSA-47w6-gwp4-w6vc
0.0.0b0 - 5.0.2 GHSA-47w6-gwp4-w6vc
Unknown
3 months ago
Vantage6: Set admin user and password from environment or configuration
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3400
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3400
Unknown
3 months ago
Vantage6: 2FA can be circumvented with hacked email access
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3398
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3398
Unknown
3 months ago
Vantage6: No limit on emails sent for password/MFA reset
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3399
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3399
Impacted packages
Timeline
Published
3 months ago
July 13, 2026 at 03:46 PM UTC
Fixed (5.0.0)
5 months ago
June 04, 2026 at 10:51 AM UTC
Last Modified
3 months ago
July 13, 2026 at 04:33 PM UTC