Ramparts
Monthly
Bypass the security scan in Highflame ramparts 0.8.1 through 0.8.10 to conceal a malicious .pyc placed under scripts/<subdir>/__pycache__/, so a skill bundle passes the ramparts check and, when the victim runs the skill, CPython executes the hidden bytecode. The flaw is a CWE-693 protection-mechanism failure that requires victim interaction; only versions 0.8.1 through 0.8.10 are affected. The supplied CVSS 4.0 base score is 7.1 (High), and no public exploit code is identified in the supplied data.
Bypass the security scan in Highflame ramparts 0.8.1 through 0.8.10 to conceal a malicious .pyc placed under scripts/<subdir>/__pycache__/, so a skill bundle passes the ramparts check and, when the victim runs the skill, CPython executes the hidden bytecode. The flaw is a CWE-693 protection-mechanism failure that requires victim interaction; only versions 0.8.1 through 0.8.10 are affected. The supplied CVSS 4.0 base score is 7.1 (High), and no public exploit code is identified in the supplied data.