CVE-2026-73652

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

CVE-2026-73652 vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

CVE-2026-73652

In vantage6, versions

CVE-2026-73652 vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

EUVD-2026-58195

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

CVE-2026-73652 vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

CVE-2026-73652

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

CVE-2026-73652: Incorrect Authorization

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

PT-2026-71736

Name of the Vulnerable Software and Affected Versions vantage6 versions prior to 5.0.3 Description vantage6 is an open-source infrastructure for privacy preserving analysis. The algorithm-store edit permission lacks an ownership check, which allows an algorithm developer to modify another...

vantage6-algorithm-store (>=4.3.0b3, <=4.3.0rc2), vantage6-node (>=4.0.0a2, <=4.3.0rc2) +1 more potentially affected by CVE-2024-23823 via vantage6 (>=4.0.0a2, <=4.3.0rc2)

vantage6 PYPI version =4.0.0a2, =4.3.0b3, =4.0.0a2, =4.0.0a2, =4.3.0rc2 Source cves: CVE-2024-23823 Source advisory: OSV:PYSEC-2026-2004...

vantage6-algorithm-store (>=4.3.0b3, <=4.3.0rc2), vantage6-node (>=4.0.0a2, <=4.3.0rc2) +1 more potentially affected by CVE-2024-23823 via vantage6 (>=4.0.0a2, <=4.3.0rc2)

vantage6 PYPI version =4.0.0a2, =4.3.0b3, =4.0.0a2, =4.0.0a2, =4.3.0rc2 Source cves: CVE-2024-23823 Source advisory: OSV:GHSA-4946-85PR-FVXH...