CVE-2026-73652

Name of the Vulnerable Software and Affected Versions vantage6 versions prior to 5.0.3

Description vantage6 is an open-source infrastructure for privacy preserving analysis. The algorithm-store edit permission lacks an ownership check, which allows an algorithm developer to modify another developer's algorithm while it is pending or under review. An attacker can change metadata, such as the algorithm image or image tag, leading reviewers and nodes to trust an image different from the one originally submitted for approval.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.