CVE-2023-41881

vantage6 is privacy preserving federated learning infrastructure. When a collaboration is deleted, the linked resources (such as tasks from that collaboration) should be deleted. This is partly to manage data properly, but also to prevent a potential (but unlikely) side-effect that affects versions prior to 4.0.0, where if a collaboration with id=10 is deleted, and subsequently a new collaboration is created with id=10, the authenticated users in that collaboration could potentially see results of the deleted collaboration in some cases. Version 4.0.0 contains a patch for this issue. There are no known workarounds.

• CWE-200
• CWE-708

• https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400Release Notes
• https://github.com/vantage6/vantage6/pull/748Patch
• https://github.com/vantage6/vantage6/security/advisories/GHSA-rf54-7qrr-96j6Third Party Advisory
• https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400Release Notes
• https://github.com/vantage6/vantage6/pull/748Patch
• https://github.com/vantage6/vantage6/security/advisories/GHSA-rf54-7qrr-96j6Third Party Advisory

Published

Oct 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-41876Cross-Site Request Forgery (CSRF) vulnerability in Hardik Ka…8.8
• CVE-2023-41877GeoServer is an open source software server written in Java …7.2
• CVE-2023-41878MeterSphere is a one-stop open source continuous testing pla…9.8
• CVE-2023-41879Magento LTS is the official OpenMage LTS codebase. Guest ord…7.5
• CVE-2023-4188 SQL Injection in GitHub repository instantsoft/icms2 prior …9.1
• CVE-2023-41880Wasmtime is a standalone runtime for WebAssembly. Wasmtime v…5.3
• CVE-2023-41882vantage6 is privacy preserving federated learning infrastruc…4.3
• CVE-2023-41884ZoneMinder is a free, open source Closed-circuit television …6.5
• CVE-2023-41885Piccolo is an ORM and query builder which supports asyncio. …5.3
• CVE-2023-41886OpenRefine is a powerful free, open source tool for working …7.5
• CVE-2023-41887OpenRefine is a powerful free, open source tool for working …9.8
• CVE-2023-41888GLPI stands for Gestionnaire Libre de Parc Informatique is a…5.4