Description
Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc under scripts/<subdir>/__pycache__/ that ramparts silently ignores, while CPython executes it when the skill runs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| highflame-ai | ramparts | 0.8.1 – ≤ 0.8.10 | — |
References
- GitHub Issue #154 issue-tracking
- https://github.com/highflame-ai/ramparts/blob/v0.8.10/src/skills.rs#L898 technical-description
- https://github.com/highflame-ai/ramparts product
- VulnCheck Advisory: Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc third-party-advisory