CVE-2026-73652

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

CVE-2026-73652 vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

CVE-2026-73652 vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

EUVD-2026-58195

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

CVE-2026-73652

In vantage6, versions

CVE-2026-73652

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

CVE-2026-73652 vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

CVE-2026-73652: Incorrect Authorization

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

PT-2026-71736

Name of the Vulnerable Software and Affected Versions vantage6 versions prior to 5.0.3 Description vantage6 is an open-source infrastructure for privacy preserving analysis. The algorithm-store edit permission lacks an ownership check, which allows an algorithm developer to modify another...

vantage6-algorithm-store (4.13.7rc1), vantage6-node (4.13.7rc1) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.13.7rc1)

vantage6 PYPI version 4.13.7rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.7rc1 - vantage6-node 4.13.7rc1 - vantage6-server 4.13.7rc1 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (>=5.0.0a0, <=5.0.0rc91), vantage6-hq (>=5.0.0b2, <=5.0.0rc91) +2 more potentially affected by CVE-2024-24769 via vantage6 (>=5.0.0a0, <=5.0.0rc91)

vantage6 PYPI version =5.0.0a0, =5.0.0a0, =5.0.0b2, =5.0.0a0, =5.0.0a0, =5.0.0b1 Source cves: CVE-2024-24769 Source advisory: OSV:PYSEC-2026-3399...

vantage6-algorithm-store (4.3.0rc2), vantage6-node (4.3.0rc2) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.3.0rc2)

vantage6 PYPI version 4.3.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.3.0rc2 - vantage6-node 4.3.0rc2 - vantage6-server 4.3.0rc2 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (4.12.2), vantage6-node (4.12.2) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.12.2)

vantage6 PYPI version 4.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.12.2 - vantage6-node 4.12.2 - vantage6-server 4.12.2 Source cves: CVE-2024-24769 Source advisory: OSV:PYSEC-2026-339...

vantage6-algorithm-store (4.5.3), vantage6-server (4.5.3) potentially affected by CVE-2024-24769 via vantage6 (4.5.3)

vantage6 PYPI version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.5.3 - vantage6-server 4.5.3 Source cves: CVE-2024-24769 Source advisory: OSV:PYSEC-2026-3399...

vantage6-algorithm-store (4.15.1), vantage6-node (4.15.1) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.15.1)

vantage6 PYPI version 4.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.15.1 - vantage6-node 4.15.1 - vantage6-server 4.15.1 Source cves: CVE-2024-24769 Source advisory: OSV:PYSEC-2026-339...

vantage6-algorithm-store (4.5.0rc3), vantage6-node (4.5.0rc3) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.5.0rc3)

vantage6 PYPI version 4.5.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.5.0rc3 - vantage6-node 4.5.0rc3 - vantage6-server 4.5.0rc3 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (4.13.3rc1), vantage6-node (4.13.3rc1) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.13.3rc1)

vantage6 PYPI version 4.13.3rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.3rc1 - vantage6-node 4.13.3rc1 - vantage6-server 4.13.3rc1 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (4.10.0rc4), vantage6-node (4.10.0rc4) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.10.0rc4)

vantage6 PYPI version 4.10.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.10.0rc4 - vantage6-node 4.10.0rc4 - vantage6-server 4.10.0rc4 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (4.3.2), vantage6-node (4.3.2) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.3.2)

vantage6 PYPI version 4.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.3.2 - vantage6-node 4.3.2 - vantage6-server 4.3.2 Source cves: CVE-2024-24769 Source advisory: OSV:PYSEC-2026-3399...

vantage6-algorithm-store (4.7.0rc2), vantage6-node (4.7.0rc2) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.7.0rc2)

vantage6 PYPI version 4.7.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.7.0rc2 - vantage6-node 4.7.0rc2 - vantage6-server 4.7.0rc2 Source cves: CVE-2024-24769 Source advisory:...