Who is not affected by CVE-2026-120202?

Not affected if: no-third-party-skills, ramparts-not-in-range, skills-not-scanned-with-ramparts.

Live › vulnerability › CVE-2026-120202

high7.1AI agents & MCP

Highflame ramparts: security scanner skips nested .pyc files, hiding malicious skill code

Highflame ramparts 0.8.1 to 0.8.10 does not look at nested directories or .pyc files when scanning an agentskills.io skill bundle (collect_bundle_siblings and walk_bundle_subdir in src/skills.rs). A skill with clean .py decoys and a malicious unchecked-hash .pyc under scripts/<subdir>/__pycache__/ scans with 0 findings, but CPython loads the .pyc when the skill's code is imported. The reporter's PoC ran os.system at import time on 0.8.2. No fixed release or vendor response found; issue #154 is open.

Summary written from the sources below. Check the originals before acting.

CVSS 4.0

7.1

high

scored by [email protected]

known so far6 of 6

First public: Oct 31, 2026 UTC
Last modified: Oct 31, 2026
Status: open
Known exploitation: None reported
Public exploit: 1 PoC repo on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-31 18:37 UTC. All times on this page are UTC.

Who is affected

1 product

Teams that run ramparts to scan AI agent skill bundles before use, in versions 0.8.1 through 0.8.10. Exposure depends on installing untrusted skill bundles that contain precompiled .pyc files, which the scanner does not inspect. Teams not running ramparts in that version range, or not loading third-party skill bundles, can skip it.

Product	Ecosystem	Affected	Fixed in
ramparts	crates.io	>= 0.8.1, <= 0.8.10	–

Who cares: ai-agents, cargo, highflame, mcp, python, ramparts, rust, scanner-bypass, skills
Not affected if: no-third-party-skills, ramparts-not-in-range, skills-not-scanned-with-ramparts

How to check

ramparts is a Rust crate, not a pip package: run ramparts --version or cargo install --list and look for 0.8.1 through 0.8.10 (0.8.10 is the latest on crates.io).
Before trusting a ramparts scan of a skill bundle, run find <bundle> -name '*.pyc' -o -name __pycache__ and treat any hit as suspect; delete them or reject the bundle.

Know the next one before it finds you.

Get started free

Highflame ramparts: security scanner skips nested .pyc files, hiding malicious skill code

Summary written from the sources below. Check the originals before acting.

Product

Ecosystem

Affected

Fixed in

ramparts

crates.io

>= 0.8.1, <= 0.8.10

–

Highflame ramparts: security scanner skips nested .pyc files, hiding malicious skill code

Who is affected

How to check

Know the next one before it finds you.

Highflame ramparts: security scanner skips nested .pyc files, hiding malicious skill code

Who is affected

How to check

Know the next one before it finds you.

The fix

Who had it, and when

What the sources say, verbatim

Sources