CVE-2026-120202 Details
Description
Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc under scripts/<subdir>/__pycache__/ that ramparts silently ignores, while CPython executes it when the skill runs.
A security scan bypass vulnerability has been identified in Highflame Ramparts versions 0.8.1 through 0.8.10. This vulnerability allows attackers to conceal malicious payloads within skill bundles, as the scanning process overlooks nested directories and .pyc files. Attackers can exploit this by placing an unchecked-hash .pyc file, containing harmful code, into the __pycache__ directory of a subdirectory within the scripts folder. While Ramparts fails to detect this, the CPython interpreter executes the payload when the skill is used.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 31, 2026CISA-ADP
Assessed Nov 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/highflame-ai/ramparts/issues/154 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/highflame-ai/ramparts | [email protected] | ProductSource CodeVendor |
| https://github.com/highflame-ai/ramparts/blob/v0.8.10/src/skills.rs#L898 | [email protected] | Source CodeVendor |
| https://github.com/highflame-ai/ramparts/issues/154 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://www.vulncheck.com/advisories/highflame-ramparts-0.8.1-through-0.8.10-skill-bundle-scan-bypass-via-nested-pyc | [email protected] | AdvisoryVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-693 | Protection Mechanism Failure | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Highflame ramparts | >= 0.8.1, <= 0.8.10 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | CVE Modified | CISA-ADP |
| Oct 31, 2026 | New CVE Received | [email protected] |