---
id: CVE-2026-120202
title: >-
  Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested
  .pyc
summary: >-
  Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass
  vulnerability that allows attackers to hide malicious payloads because
  collect_bundle_siblings and walk_bundle_subdir skip nested directories and
  .pyc files. Attacke…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
cvssSource: cna
cwe:
  - CWE-693
vendor: highflame-ai
product: ramparts
affected:
  - ramparts >= 0.8.1 <= 0.8.10
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T15:30:32.922798Z'
exploitAvailable: true
published: '2026-10-31'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T15:31:00.622Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-120202'
references:
  - url: 'https://github.com/highflame-ai/ramparts/issues/154'
    label: 'GitHub Issue #154'
  - url: 'https://github.com/highflame-ai/ramparts/blob/v0.8.10/src/skills.rs#L898'
  - url: 'https://github.com/highflame-ai/ramparts'
  - url: >-
      https://www.vulncheck.com/advisories/highflame-ramparts-0.8.1-through-0.8.10-skill-bundle-scan-bypass-via-nested-pyc
    label: >-
      VulnCheck Advisory: Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle
      Scan Bypass via Nested .pyc
tags:
  - cve.org
  - exploit-available
epss: 0.00287
epssPercentile: 0.21392
ingestedAt: '2026-11-05T21:36:00.903Z'
---

## Overview

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc under scripts/<subdir>/__pycache__/ that ramparts silently ignores, while CPython executes it when the skill runs.

## Affected

- `ramparts >= 0.8.1 <= 0.8.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.