CVE-2026-54533
Description
vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, malicious algorithms can potentially access other algorithms input and output files. Version 5.0.0 fixes the issue. As a workaround, verify and restrict the algorithm containers that are allowed to run on the node.
Summary dbcve.org
A container isolation vulnerability in vantage6 versions prior to 5.0.0 allows malicious algorithms to access input and output files belonging to other algorithms running on the same node, breaking the isolation boundary between algorithm containers.
Mitigation
Upgrade to version 5.0.0 or later to patch the container isolation flaw. Alternatively, implement algorithm container verification and restriction policies to ensure only trusted algorithms execute on nodes.