vantage6 node has an Improper Access Control issue

MEDIUM 6.9CVE-2026-54533 · GHSA-x9f6-9rvm-mmrg · PYSEC-2026-3401 · Published 17/06/2026 · updated 23/06/2026

Package	Affected versions	Patched versions
vantage6 PyPI	`< 5.0.0`	`5.0.0`

Description

Impact

Malicious algorithms can potentially access other algorithms input and output files.

Patches

Todo

Workarounds

Verify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this.

References

https://docs.vantage6.ai/usage/running-the-node/security

For more information

If you have any questions or comments about this advisory:

Email us at [email protected]

NVD description

vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, malicious algorithms can potentially access other algorithms input and output files. Version 5.0.0 fixes the issue. As a workaround, verify and restrict the algorithm containers that are allowed to run on the node.

References

vantage6/vantage6 security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2026-54533 · ADVISORY
vantage6/vantage6 · WEB
docs.vantage6.ai/usage/running-the-node/security · WEB
vantage6/vantage6 · PACKAGE
vantage6/vantage6 · WEB
pypi.org/project/vantage6 · PACKAGE
GitHub Advisory GHSA-x9f6-9rvm-mmrg · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free