Executive brief
vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
Affected products
- PyPI vantage6
Junglewise Threat Intelligence
CVE-2026-73652: PYSEC-2026-3703 - vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
CVE-2026-73652 · Severity: medium · CVSS 4 · Published 2026-08-19
Technologies: vantage6 (PyPI). Vendors: PyPI.
Related threats
- vantage6 incorrect authorization in algorithm review process
- PYSEC-2026-2007 - vantage6 collaboration admins can extend their influence by expanding the collaboration
- PYSEC-2026-2005 - vantage6 vulnerable to a username timing attack on recover password/MFA token
- PYSEC-2026-2004 - vantage6's CORS settings overly permissive
- PYSEC-2026-2008 - vantage6 vulnerable to username timing attack