CVE-2023-47631 json
vantage6 Node accepts non-whitelisted algorithms from malicious server
published 2023-11-14 2 y ago modified 2026-09-10 1 mo ago also GHSA-vc3v-ppc7-v486 , PYSEC-2023-303 , PYSEC-2023-304 , EUVD-2023-0256
- cvss
- 7.2
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 39%
- public exploits
- 0
- none known
Summary
vantage6 is a framework to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). In affected versions a node does not check if an image is allowed to run if a `parent_id` is set. A malicious party that breaches the server may modify it to set a fake `parent_id` and send a task of a non-whitelisted algorithm. The node will then execute it because the `parent_id` that is set prevents checks from being run. This impacts all servers that are breached by an expert user. This vulnerability has been patched in version 4.1.2. All users are advised to upgrade. There are no known workarounds for this vulnerability.
Patch / fix
- pypi vantage6-server 4.1.2
- pypi vantage6-node 4.1.2
- vantage6 vantage6 4.1.2
Exploit prediction
0.45% chance of exploitation in the next 30 days, higher than 39% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| OSV | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| GitHub | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | vantage6-server | <4.1.2 |
4.1.2 |
| pypi | vantage6-node | <4.1.2 |
4.1.2 |
Affected products
- vantage6 vantage6
Classification
References
-
github.com
/vantage6/vantage6/commit/bf83521eb12fa80aa5fc92ef1692010a9a7f8243
web, patch
-
github.com
/vantage6/vantage6/security/advisories/GHSA-vc3v-ppc7-v486
web, vendor-advisory, advisory
-
github.com
/vantage6/vantage6/blob/version/4.1.1/vantage6-node/vantage6/node/docker/docker_manager.py#L265-L268
web, product
-
nvd.nist.gov
/vuln/detail/CVE-2023-47631
advisory
-
github.com
/pypa/advisory-database/tree/main/vulns/vantage6-node/PYSEC-2023-303.yaml
web
-
github.com
/pypa/advisory-database/tree/main/vulns/vantage6-server/PYSEC-2023-304.yaml
web
-
github.com
/vantage6/vantage6
package
Sources
- CVE List CVE-2023-47631
- GitHub Advisory GHSA-vc3v-ppc7-v486
- NVD CVE-2023-47631
- OSV PYSEC-2023-303
- OSV PYSEC-2023-304
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.