Vulnerability · Published Sep 13, 2026 · Assigned by VulnCheck

CVE-2026-90772Amundsen Frontend through 4.3.0 Stored XSS via Description

High 7.6

In plain English

A high-severity cross-site scripting in amundsen-frontend from amundsen-io. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).

Severity (CVSS 3.1)7.6High

Exploit odds (30 days)0.4%top 69.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components. Attackers can inject malicious markup like img elements with onerror handlers into descriptions via the metadata service or Elasticsearch, executing JavaScript in every user's browser that views search results.

Affected products (as reported)

Vendor	Product	Versions
amundsen-io	amundsen-frontend	0 – through 4.3.0

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

References

GitHub Issue #2362 issue-tracking
https://github.com/amundsen-io/amundsen product
https://github.com/amundsen-io/amundsen/blob/frontend-4.3.0/frontend/amundsen_application/static/js/components/ResourceListItem/TableListItem/index.tsx technical-description
VulnCheck Advisory: Amundsen Frontend through 4.3.0 Stored XSS via Description third-party-advisory