Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

GHSA-x9f6-9rvm-mmrg | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceGHSA-x9f6-9rvm-mmrg

GHSA-x9f6-9rvm-mmrg

MEDIUM6.9

vantage6 node has an Improper Access Control issue

Published Jun 5, 2026

Modified 2 months ago

Fix available

Details

Impact

Malicious algorithms can potentially access other algorithms input and output files.

Patches

Todo

Workarounds

Verify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this.

References

https://docs.vantage6.ai/usage/running-the-node/security

For more information

If you have any questions or comments about this advisory:

Email us at vantage6@iknl.nl

Affected Packages

vantage6

PyPI

Fixed in:

5.0.0

References

WEB

https://docs.vantage6.ai/usage/running-the-node/security

ADVISORY

https://github.com/advisories/GHSA-x9f6-9rvm-mmrg

PACKAGE

https://github.com/vantage6/vantage6

WEB

https://github.com/vantage6/vantage6/blob/main/docs/release_notes.rst#500

WEB

https://github.com/vantage6/vantage6/issues/1932

WEB

https://github.com/vantage6/vantage6/security/advisories/GHSA-x9f6-9rvm-mmrg

ADVISORY

https://nvd.nist.gov/vuln/detail/CVE-2026-54533

Aliases

CVE-2026-54533

CVSS Analysis

CVSS v4.0

6.9

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Attack Requirements

NoneAT:N

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Vulnerable System

Vuln. Confidentiality

NoneVC:N

Vuln. Integrity

LowVI:L

Vuln. Availability

NoneVA:N

Subsequent System

Subseq. Confidentiality

NoneSC:N

Subseq. Integrity

NoneSI:N

Subseq. Availability

NoneSA:N

6.9/CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

CVE-2026-54533

Ecosystems

PyPI

Timeline

PublishedJun 5, 2026

ModifiedJul 9, 2026