Security Scan Bypass Vulnerability in Highflame Ramparts Product

CVE-2026-120202

What is CVE-2026-120202?

Highflame Ramparts versions 0.8.1 through 0.8.10 are susceptible to a security scan bypass, enabling attackers to conceal malicious payloads. The vulnerability arises due to the collect_bundle_siblings and walk_bundle_subdir functions, which fail to scan nested directories and .pyc files. This oversight allows an attacker to embed a skill bundle containing an unchecked-hash .pyc file in the scripts//pycache/ directory. As a result, Ramparts may overlook the malicious script, while CPython may execute it during skill runtime, posing a significant risk.

References