Vulnerability · Published May 13, 2026 · Assigned by GitHub_M

CVE-2026-44369CVAT: Stored XSS via annotation guides

High 8.5

In plain English

A high-severity security flaw in cvat from cvat-ai. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).

Severity (CVSS 4.0)8.5High

Exploit odds (30 days)0.3%top 81.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.5.0 to 2.63.0, an attacker who is able to create or edit an annotation guide on a task is able to add malicious JavaScript code, which will then run in the browser of anyone who opens this annotation guide. This code will be able to make arbitrary requests to CVAT with the victim user's privileges. This vulnerability is fixed in 2.64.0.

Affected products (as reported)

Vendor	Product	Versions
cvat-ai	cvat	>= 2.5.0, < 2.64.0

Weakness: CWE-80 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

References

https://github.com/cvat-ai/cvat/security/advisories/GHSA-m2h7-6xqm-p9v5 x_refsource_CONFIRM
https://github.com/cvat-ai/cvat/commit/ad9e90003d8234ac7602598b109dc11450321dfc x_refsource_MISC