CVE-2026-15605 | wandb 0.25.2.dev1 Artifact Integrity Validation hashutil.py ArtifactManifestEntry.download weak hash (Issue 12030)

A vulnerability, which was classified as problematic, has been found in wandb 0.25.2.dev1. Affected is the function ArtifactManifestEntry.download in the library wandb/sdk/lib/hashutil.py of the component Artifact Integrity Validation. The manipulation leads to use of weak hash.

This vulnerability is listed as CVE-2026-15605. The attack may be initiated remotely. There is no available exploit.

The pull request to fix this issue awaits acceptance.