Vulnerability Description
vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can change metadata including the algorithm image or image tag, causing reviewers and nodes to trust a different image from the one originally submitted for approval. No fixed version is available as of this review.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-73652?
CVE-2026-73652 is a documented vulnerability. vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer ...
How severe is CVE-2026-73652?
CVSS scoring is not yet available for CVE-2026-73652. Check NVD for updates.
Is there a patch for CVE-2026-73652?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.