CVE-2026-120202— Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc

Quick assessment

Affected

highflame-ai ramparts

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Highflame Ramparts 0.8.1 至 0.8.10 版本存在一个安全扫描绕过漏洞。该漏洞源于和函数会跳过嵌套目录及文件，导致攻击者能够隐藏恶意载荷。攻击者可分发一个技能包，其中包含位于路径下、未经哈希校验的文件；Ramparts 会静默忽略该文件，而 CPython 在运行该技能时仍会执行它。

CVSS 6.5 · Medium Updated Nov 01, 2026

Possible ATT&CK Techniques 3 AI

T1055.001 · Dynamic-link Library Injection T1105 · Ingress Tool Transfer T1562.001

Affected Version Matrix 1

Vendor	Product	Version Range	Status
highflame-ai	ramparts	`0.8.1≤ 0.8.10`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc

Source: CVE Program / CVE List V5

Vulnerability Description

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc under scripts/<subdir>/__pycache__/ that ramparts silently ignores, while CPython executes it when the skill runs.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

保护机制失效

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
highflame-ai	ramparts	0.8.1 ~ 0.8.10	-

II. Public POCs for CVE-2026-120202

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-120202

请登录查看更多情报信息。

Other References for CVE-2026-120202 (4)

https://github.com/highflame-ai/ramparts/blob/v0.8.10/src/skills.rs#L898 technical-description
https://github.com/highflame-ai/ramparts product
https://github.com/highflame-ai/ramparts/issues/154 issue-tracking
https://www.vulncheck.com/advisories/highflame-ramparts-0.8.1-through-0.8.10-skill-bundle-scan-bypass-via-nested-pyc third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-120202

IV. Related Vulnerabilities

Same weakness: CWE-693