EUVD-2026-52895Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible stored XSS, low-privilege upload required, victim interaction needed, scope changes to victim browser with full confidentiality and integrity impact.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionCVE.org
CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.5.0 through 2.66.0 contain a XSS vulnerability that can be accessed through annotation guide assets. When CVAT serves the files attached to an annotation guide, it labels them with a media type ( Content-Type ) that the attacker can influence, so instead of treating an uploaded file as plain data, the victim's browser can be told to treat it as an HTML page and run any JavaScript inside it. This issue has been fixed in version 2.67.0.
AnalysisAI
Stored XSS in CVAT annotation guide asset handling (versions 2.5.0-2.66.0) allows an authenticated attacker to upload a file with an attacker-controlled Content-Type header; CVAT then serves the asset with that header intact, causing a victim's browser to render the file as an HTML page and execute any embedded JavaScript. The attack targets collaborative annotation workflows where guides are shared across users or teams, enabling session hijacking, credential theft, or unauthorized actions within the victim's browser context. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated CVAT account with permission to upload annotation guide assets - specifically, write access to the /api/assets endpoint for at least one project or job guide (PR:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.5 (AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N) reflects a realistic attack profile: network-accessible, low attacker privilege (authenticated upload capability), and passive victim interaction required. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An authenticated annotator uploads a file named 'guide-cover.gif' to a shared annotation guide project but sets the multipart Content-Type field to 'text/html' with an embedded JavaScript payload (e.g., a cookie-stealing script). When a project admin or peer annotator opens the annotation guide and the browser fetches the asset, CVAT serves it with Content-Type: text/html, causing the browser to execute the script and silently exfiltrate the victim's session token to an attacker-controlled server. … |
| Remediation | Upgrade to CVAT version 2.67.0, which contains the fix confirmed by commit 44d717ad3a9d914f1cb2593ce09efd87d0b9159e. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all CVAT deployments and confirm installed versions to identify systems affected (2.5.0 through 2.66.0). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Stored cross-site scripting in CVAT (Computer Vision Annotation Tool) versions 2.5.0 through 2.63.0 allows an authentica
Stored cross-site scripting in CVAT versions 2.68.0 through 2.69.x allows an authenticated user with annotation guide ed
Path traversal in CVAT versions 1.6.0 through 2.64.0 enables an authenticated, low-privileged attacker with write access
Cross-organization report enumeration in CVAT before 2.69.0 exposes the existence of quality reports belonging to other
Broken object-level authorization in CVAT's lambda annotation API allows authenticated Worker-role users to exploit pred
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today