CVAT CVE-2026-58373

Exploitation requires the attacker to hold a valid authenticated session on the CVAT instance (PR:L, confirmed by CVSS vector). The target deployment must use CVAT's quality reports feature with at least two organizations present, as the oracle only reveals cross-organizational data boundaries in multi-tenant configurations. Exploitation is limited to report ID existence disclosure - report content, metadata, and annotation data are not exposed. Single-organization deployments gain no meaningful attacker advantage from this flaw. No special network position or elevated privileges beyond standard user authentication are required.

The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N) scores 5.3 and accurately reflects the limited impact: only report existence is disclosed, not report content, and exploitation requires valid credentials (PR:L). The attack complexity is genuinely low - sequential integer enumeration is trivially scriptable and requires no special tooling. There is no KEV listing and no publicly known POC at time of analysis, and EPSS data was not provided. The real-world risk is highest in multi-tenant CVAT deployments where organizational boundary enforcement is a security requirement, such as managed annotation platforms or shared enterprise instances. In single-organization deployments the practical impact is negligible. The missing integrity and availability impact vectors confirm this is a confidentiality-only, low-severity information disclosure with no direct path to escalation from the vulnerability alone.

An authenticated user on a shared CVAT instance iterates requests to the quality reports API with sequential parent_id integers: /api/quality/reports?parent_id=1, ?parent_id=2, and so on. HTTP 500 responses reveal that a report with that ID exists (and belongs to another organization), while HTTP 404 responses confirm the ID does not exist. The attacker thereby constructs a map of all cross-organization report IDs without reading their content. No public POC code has been identified, but the technique requires only a basic scripted HTTP client.