EUVD-2026-20605Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber
Lifecycle Timeline
6DescriptionGitHub Advisory
AIL framework is an open-source platform to collect, crawl, process and analyse unstructured data. Prior to 6.8, a stored cross-site scripting (XSS) vulnerability was identified in the modal item preview functionality. When item content longer than 800 characters was processed, attacker-controlled content was returned without an explicit text/plain content type, allowing the browser to interpret the response as active HTML. This could result in execution of arbitrary JavaScript in the context of an authenticated user viewing a crafted item. This vulnerability is fixed in 6.8.
AnalysisAI
Stored cross-site scripting in AIL Framework <6.8 allows authenticated high-privilege attackers to inject malicious JavaScript through the modal item preview function. When processing item content exceeding 800 characters, the application returns attacker-controlled content without explicit text/plain content-type headers, enabling browser interpretation as HTML. Successful exploitation executes arbitrary JavaScript in victim browsers viewing crafted items, compromising confidentiality and integrity across system and user contexts. No public exploit identified at time of analysis.
Technical ContextAI
Vulnerability stems from improper output encoding (CWE-79) in content preview rendering logic for items exceeding 800-character threshold. Application fails to enforce text/plain MIME type on user-controlled responses, triggering automatic HTML parsing. Affects cpe:2.3:a:ail-project:ail-framework:*:*:*:*:*:*:*:* versions prior to 6.8. CVSS 4.0 vector PR:H indicates high-privilege requirement, yet network-accessible with no user interaction needed once content is stored.
RemediationAI
Vendor-released patch: upgrade to AIL Framework version 6.8 immediately. This release implements proper content-type enforcement and output encoding for modal item previews. Upgrading eliminates stored XSS attack surface in affected preview functionality. Until patching, restrict access to item creation and modification to only essential trusted administrators, implement Content Security Policy headers to mitigate script execution, and audit existing stored items for suspicious payloads. Monitor application logs for abnormal item content patterns. Official security advisory available at https://github.com/ail-project/ail-framework/security/advisories/GHSA-fj6v-43r7-gcjm and detailed vulnerability analysis at https://vulnerability.circl.lu/vuln/gcve-1-2026-0023.
More in Ail Framework
View allAuthenticated path traversal in AIL Framework (CIRCL's Analysis Information Leak threat-intel platform) lets a low-privi
Global.py in AIL framework 2.8 allows path traversal. Rated high severity (CVSS 7.5), this vulnerability is remotely exp
Path traversal in AIL Framework's PDF object handling lets an authenticated user read files outside the intended PDF sto
Path traversal in AIL Framework's `/objects/item/diff` endpoint exposes gzip-compressed server-side files to authenticat
Unlimited OTP brute-force against AIL Framework's two-factor authentication endpoint allows an attacker who already poss
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today