-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIA Semantic Attack on Google Gemini - Read the Latest Research
A Semantic Attack on Google Gemini - Read the Latest Research
Miggo AI
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| nova | pip | >= 15.0.0, < 15.1.1 | 15.1.1 |
| nova | pip | >= 16.0.0, < 16.1.2 | 16.1.2 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper handling of encrypted volumes during swap operations. The commit diff shows that the swap_volume function was modified to add context parameter and encryption checks using _get_volume_encryption. In vulnerable versions, this validation was absent, allowing unencrypted data writes. The patch explicitly blocks swap_volume for encrypted volumes in older branches, confirming that the unpatched swap_volume implementation was the root cause.