EUVD-2026-56843Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable API requires authenticated write access to a job (PR:L); impact is limited to availability of the automatic annotation feature (A:L) with no confidentiality or integrity effect and no scope change.
Primary rating from Vendor (github).
CVSS VectorVendor: github
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionCVE.org
CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user with write access to a CVAT job can submit a batch automatic annotation request to RequestViewSet.create with inconsistent task and job IDs, and because the task ID determines the single active request slot, block automatic annotation for another task whose ID is known. This issue is fixed in version 2.72.0.
AnalysisAI
Authenticated annotation slot hijacking in CVAT versions 2.17.0 through 2.71.x enables any user with write access to a single job to deny automatic annotation service to arbitrary other tasks by submitting batch annotation requests with deliberately mismatched task and job IDs. The RequestViewSet.create endpoint reserved the single active annotation slot by task ID without validating that the submitted job belonged to that task or that the requester had any access to it, allowing cross-task resource monopolization. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must be an authenticated CVAT user holding write access to at least one job within the affected deployment (PR:L per CVSS 4.0 vector - unauthenticated exploitation is not possible). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk is moderate-low. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An authenticated CVAT user with write access to Job A posts a request to the batch annotation endpoint specifying Job A's ID but the task ID of an inaccessible Task B - whose sequential integer ID they enumerate by probing the API. The system reserves Task B's single active annotation slot for the attacker's malformed request, causing all subsequent legitimate annotation requests from Task B's owner to be rejected until an administrator intervenes. … |
| Remediation | Upgrade CVAT to version 2.72.0, the vendor-confirmed fixed release available at https://github.com/cvat-ai/cvat/releases/tag/v2.72.0 (implemented via PR #10964, commit 20a1076a0b9de47e067b121e40f16d66d373b3f7). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today