Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can change metadata including the algorithm image or image tag, causing reviewers and nodes to trust a different image from the one originally submitted for approval. No fixed version is available as of this review.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-73652 vantage6 Algorithm Store Permission Flaw Allows Unauthorized Metadata Alteration https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-73652
Post summary
The notice announces CVE‑2026‑73652 as a permission flaw in Vantage6’s Algorithm Store that permits unauthorized metadata alteration.