EUVD-2026-66600
GHSA-q8rv-hw8g-gww7
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
No attacker privileges needed; scope changes to local filesystem via unauthenticated media route; UI:R for required hover interaction; C:H for local file read capability.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionCVE.org
FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/components/FieldLabelAndInfo/index.tsx passes the description string to React's dangerouslySetInnerHTML, and no layer between storage and render escapes or sanitises it; the neighbouring info values in the same component are rendered as React children and are escaped, so the description is the only raw path. A description is free-form text held in the dataset schema, so it persists in the database and travels with an exported or published dataset. Opening a dataset obtained from another party and hovering the field runs the stored markup in the application's origin. That origin is shared with the FiftyOne server, whose media route returns the contents of a caller-named absolute path and which is unauthenticated in the open-source server, so the injected script can read local files and reach the dataset and operator endpoints as the viewing user.
AnalysisAI
Stored cross-site scripting in FiftyOne (all versions before v1.21.0) allows a dataset contributor to execute arbitrary JavaScript in the browser of any user who opens a poisoned dataset and hovers over a field with a malicious description. The payload persists in the dataset schema across exports, publications, and shares, giving it a supply-chain propagation vector common in ML/data-science workflows. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two conditions on the victim side: the victim must open a FiftyOne dataset that contains a field whose description property holds a malicious HTML/script payload, and the victim must hover over that field in the FiftyOne app sidebar to trigger the tooltip/info render. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 7.0 (AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L) reflects a network-reachable stored XSS with active user interaction required - the victim must hover over the field. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker crafts a FiftyOne dataset with a field whose description contains a JavaScript payload embedded in HTML - for example, an `<img>` tag with an `onerror` handler that fetches `/media?filepath=/etc/passwd` (or a sensitive credential file) via the unauthenticated media route and exfiltrates the response to an attacker-controlled server. The dataset is distributed through a public dataset hub, shared via a collaboration link, or embedded in a model training pipeline. … |
| Remediation | Upgrade FiftyOne to v1.21.0 or later, which is the vendor-released patch addressing this vulnerability (https://github.com/voxel51/fiftyone/releases/tag/v1.21.0). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all FiftyOne installations and document their current versions to identify exposure. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today