{"id":"CVE-2026-120202","title":"Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc","summary":"Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories and .pyc files. Attacke…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvssSource":"cna","cwe":["CWE-693"],"vendor":"highflame-ai","product":"ramparts","affected":["ramparts >= 0.8.1 <= 0.8.10"],"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T15:30:32.922798Z"},"exploitAvailable":true,"published":"2026-10-31","updated":"2026-11-05","sourceUpdated":"2026-11-05T15:31:00.622Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-120202","references":[{"url":"https://github.com/highflame-ai/ramparts/issues/154","label":"GitHub Issue #154"},{"url":"https://github.com/highflame-ai/ramparts/blob/v0.8.10/src/skills.rs#L898"},{"url":"https://github.com/highflame-ai/ramparts"},{"url":"https://www.vulncheck.com/advisories/highflame-ramparts-0.8.1-through-0.8.10-skill-bundle-scan-bypass-via-nested-pyc","label":"VulnCheck Advisory: Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc"}],"tags":["cve.org","exploit-available"],"epss":0.00287,"epssPercentile":0.21392,"ingestedAt":"2026-11-05T21:36:00.903Z","slug":"CVE-2026-120202","body":"## Overview\n\nHighflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc under scripts/<subdir>/__pycache__/ that ramparts silently ignores, while CPython executes it when the skill runs.\n\n## Affected\n\n- `ramparts >= 0.8.1 <= 0.8.10`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}