Vantage6 vulnerabilities

Products

• Vantage6 22
• Vantage6-ui 2

Newest

• vantage6 vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review CVE-2026-73652 7.1 HighJuly 24, 2026
• vantage6 vantage6 node has an Improper Access Control issue CVE-2026-54533 Fix available 6.9 MediumJune 5, 2026
• vantage6 Vantage6: Set admin user and password from environment or configuration CVE-2026-54445 Fix available 6.9 MediumJune 5, 2026
• vantage6 Vantage6: 2FA can be circumvented with hacked email access CVE-2024-27928 Fix available 5.9 MediumJune 5, 2026
• vantage6 Vantage6: No limit on emails sent for password/MFA reset CVE-2024-24769 Fix available 2.1 LowJune 5, 2026
• vantage6 Vantage6 Server JWT secret not cryptographically secure CVE-2025-43866 Fix available 1.7 LowJune 12, 2025
• vantage6 vantage6 lacks brute-force protection on change password functionality CVE-2025-43863 Fix available 1.7 LowJune 12, 2025
• vantage6 vantage6 collaboration admins can extend their influence by expanding the collaboration CVE-2024-32969 Fix available 2.7 LowMay 22, 2024
• vantage6 vantage6-ui Security headers not set in vantage6-UI CVE-2024-24562 5.4 MediumMarch 14, 2024
• vantage6 CORS settings overly permissive in vantage6 CVE-2024-23823 Fix available 4.2 MediumMarch 14, 2024
• vantage6 Username timing attack on recover password/MFA token in vantage6 CVE-2024-24770 Fix available 5.3 MediumMarch 14, 2024
• vantage6 vantage6-ui vantage6-UI docker image leaks software version information CVE-2024-22200 3.3 LowJanuary 30, 2024
• vantage6 vantage6 unencrypted task can be created in encrypted collaboration CVE-2024-22193 Fix available 3.5 LowJanuary 30, 2024
• vantage6 vantage6 username timing attack CVE-2024-21671 Fix available 3.7 LowJanuary 30, 2024
• vantage6 vantage6 insecure SSH configuration for node and server containers CVE-2024-21653 Fix available 6.5 MediumJanuary 30, 2024
• vantage6 Remote code execution CVE-2024-21649 Fix available 8.8 HighJanuary 30, 2024
• vantage6 vantage6 Node accepts non-whitelisted algorithms from malicious server CVE-2023-47631 Fix available 7.2 HighNovember 14, 2023
• vantage6 vantage6 Improper Access Control vulnerability CVE-2023-41882 Fix available 5.4 MediumOctober 11, 2023
• vantage6 Deleting a collaboration should also delete linked resources CVE-2023-41881 Fix available 3.7 LowOctober 11, 2023
• vantage6 Defining resource name as integer in vantage6 may give unintended access CVE-2023-28635 Fix available 5.4 MediumOctober 11, 2023
• vantage6 vantage6's Pickle serialization is insecure CVE-2023-23930 Fix available 5.5 MediumOctober 11, 2023
• vantage6 Refresh tokens do not expire in Vantage6 CVE-2023-23929 Fix available 8.8 HighFebruary 28, 2023
• vantage6 Improper Preservation of Permissions in vantage6 CVE-2023-22738 Fix available 6.3 MediumFebruary 28, 2023
• vantage6 Observable Response Discrepancy in vantage6 CVE-2022-39228 Fix available 5.3 MediumFebruary 28, 2023