TI-2023-25773 Aliases CVE-2023-47631 GHSA-vc3v-ppc7-v486

vantage6 Node accepts non-whitelisted algorithms from malicious server

LOW 38CWE-345Published 2023-11-14 · Updated 2024-08-02

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-345.

Summary

vantage6 is a framework to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). In affected versions a node does not check if an image is allowed to run if a `parent_id` is set. A malicious party that breaches the server may modify it to set a fake `parent_id` and send a task of a non-whitelisted algorithm. The node will then execute it because the `parent_id` that is set prevents checks from being run. This impacts all servers that are breached by an expert user. This vulnerability has been patched in version 4.1.2. All users are advised to upgrade. There are no known workarounds for this vulnerability.

Why it matters now

EPSS 0.00446 39th percentileScored 2026-11-07

Fix Fixed vantage6 (vantage6): 4.1.2vantage6-server (PyPI): 4.1.2+1 more product

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
vantage6	vantage6	before 4.1.2	4.1.2	Patch available	CNA
—	vantage6-server (PyPI)	before 4.1.2	4.1.2	Patch available	GHSA-vc3v-ppc7-v486
—	vantage6-node (PyPI)	before 4.1.2	4.1.2	Patch available	GHSA-vc3v-ppc7-v486

vantage6 Vendorvantage6 Affected before 4.1.2 Fixed in 4.1.2 Patch available CNA
vantage6-server (PyPI) Vendor— Affected before 4.1.2 Fixed in 4.1.2 Patch available GHSA-vc3v-ppc7-v486
vantage6-node (PyPI) Vendor— Affected before 4.1.2 Fixed in 4.1.2 Patch available GHSA-vc3v-ppc7-v486

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:vantage6:vantage6::::::::	before 4.1.2	Vulnerable	vantage6
cpe:2.3:a:vantage6:vantage6:4.1.2:rc1::::::	4.1.2 rc1	Vulnerable	vantage6

cpe:2.3:a:vantage6:vantage6:*:*:*:*:*:*:*:* Versions before 4.1.2 Vulnerable ·vantage6
cpe:2.3:a:vantage6:vantage6:4.1.2:rc1:*:*:*:*:*:* Versions 4.1.2 rc1 Vulnerable ·vantage6

Remediation

Fix · CNA vantage6 (vantage6) Fixed in 4.1.2
Fix · GHSA-vc3v-ppc7-v486 vantage6-server (PyPI) Fixed in 4.1.2 Advisory →
Fix · GHSA-vc3v-ppc7-v486 vantage6-node (PyPI) Fixed in 4.1.2 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2023-47631
2026-10-03 Alias added: GHSA-vc3v-ppc7-v486

References

Patch 1

https://github.com/vantage6/vantage6/commit/bf83521eb12fa80aa5fc92ef1692010a9a7f8243

Advisory 2

Other 4

TI-2024-14786 vantage6 unencrypted task can be created in encrypted collaboration CVSS 3.1MEDIUM 4.3
TI-2024-14378 vantage6 insecure SSH configuration for node and server containers CVSS 3.1CRITICAL 9.8
TI-2024-14374 Remote code execution in vantage6 CVSS 3.1HIGH 8.8
TI-2023-09727 Refresh tokens do not expire in Vantage6 CVSS 3.1HIGH 8.8
TI-2023-09728 vantage6's Pickle serialization is insecure CVSS 3.1HIGH 7.2
TI-2024-16287 Username timing attack on recover password/MFA token in vantage6 CVSS 3.1MEDIUM 5.3

See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences