AIL Framework CVE-2026-100176

Exploitation requires (1) the attacker to seed a malicious username into a source that AIL crawls (a monitored chat or forum), which needs no authentication to AIL itself; and (2) a victim who is an authenticated analyst with access to the username timeline view AND who actively hovers over the crafted timeline entry to trigger the D3 html() tooltip. The specific vulnerable component is the client-side file var/www/static/js/d3/timeline_basic.js, where d.obj is interpolated into an HTML string without sanitization. Limiting factors: mandatory user interaction (hover), the victim must have analyst access to the timeline feature, and only unpatched versions predating commit 455dd92c are affected - the fix wraps the value in sanitize_text().

This is a stored/DOM-based XSS (CWE-79) in the AIL Framework's username timeline, confirmed by CIRCL (the vendor/reporter) with a patch already available (commit 455dd92c). The vendor CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N) rates it 8.5, but the score is tempered by UI:A - successful execution requires an authenticated analyst to actively hover over the malicious timeline entry. Injection itself needs no authentication (attacker simply plants a crafted username in a chat/forum that AIL crawls), which supports PR:N. There is NO EPSS score, NO CISA KEV listing, and NO public POC available in the provided data, so this is best characterized as 'no public exploit identified at time of analysis' rather than an actively exploited threat. The high VI:H (integrity) rating in the vendor vector is somewhat generous for an XSS whose primary demonstrated impact is script execution in the analyst's session; real impact is more credibly session hijacking and data exfiltration (confidentiality-leaning). Net: a legitimate but not urgent priority - a genuine analyst-session compromise vector, mitigated by the required hover interaction, niche product footprint, and absence of any exploitation signal. Patch and single-line sanitization fix make remediation trivial.

An attacker posts a message on a forum or chat channel that AIL crawls, using a username containing an HTML payload such as '<img src=x onerror=alert(1)>'. AIL imports and stores the username verbatim; later, an authenticated analyst opens the username timeline and hovers over that entry, causing D3's html() tooltip to render the payload and execute JavaScript in the analyst's authenticated session (enabling session hijacking or data exfiltration). No public exploit code is identified, though the trivial single-line payload lowers the bar for reproduction.