Password Brute-Force Vulnerability in Vantage6 Framework by Vantage6

CVE-2025-43863

What is CVE-2025-43863?

The Vantage6 Framework, an open-source platform designed to facilitate privacy-enhancing technologies like Federated Learning and Multi-Party Computation, is susceptible to a password brute-force attack. Attackers with access to an authenticated session can exploit the change password functionality, allowing them to continuously attempt to guess the user's password. The system returns a 'wrong password' message repetitively, enabling infinite attempts until the correct one is found. This issue has been resolved in version 4.11 of the framework.

References