6.5
MediumCVSS 3.1 · from VulnCheck
CVE-2026-120202
Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc
ramparts · CWE-693 · CWE-693Affectedramparts
FixNo fix listed yet.
PublishedOct 31, 17:25 · VulnCheck
ScoredOct 31 · 6.5 · VulnCheck
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:06 UTC
What we know
No known exploitation. CISA KEV, checked 22:06 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker only needs network access to the target. No login needed. CVSS: network, no privileges.
Someone has to open, click or run something first. CVSS: user interaction required.
A successful attack can change data. CVSS impact.
Description
Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc under scripts/<subdir>/__pycache__/ that ramparts silently ignores, while CPython executes it when the skill runs.
From VulnCheck
Affected and fixed versions
ProductAffectedFixed inramparts0.8.1 – 0.8.10–
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known