cvat-ai

Top products

The 15 most recently published vulnerabilities affecting cvat-ai.

• CVE-2026-73220CVAT: Stored XSS via annotation guides in audio tasksAug 20, 2026
• CVE-2026-73221CVAT: Flawed authorization logic in endpoints related to lambda requestsAug 11, 2026
• CVE-2026-73219CVAT: Denial of service with regards to automatic annotationAug 11, 2026
• CVE-2026-65986CVAT has stored XSS via annotation guide assetsAug 4, 2026
• CVE-2026-47682CVAT: Missing path-containment validation in multiple entry points allows arbitrary path writesAug 4, 2026
• CVE-2026-58373CVAT < 2.69.0 - Missing Authorization on Quality Reports parent_id Filter Leaks Cross-Organization Report Existence4.3Jun 30, 2026
• CVE-2026-44369CVAT: Stored XSS via annotation guidesMay 13, 2026
• CVE-2026-23526CVAT vulnerable to privilege escalation of users with staff status8.8Jan 21, 2026
• CVE-2026-23516CVAT vulnerable to XSS via skeleton SVG images5.4Jan 21, 2026
• CVE-2025-68430CVAT vulnerable to directory traversal via mounted share listing4.3Dec 19, 2025
• CVE-2025-64485CVAT: Mounted share file overwrite via crafted requestNov 7, 2025
• CVE-2025-54573CVAT vulnerable to email verification bypass by use of basic authentication4.3Jul 30, 2025
• CVE-2025-49135CVAT missing validation for in-progress backup upload names6.5Jun 25, 2025
• CVE-2025-48381CVAT has information disclosure via browsable API4.3May 30, 2025
• CVE-2025-23045CVAT allows remote code execution via tracker Nuclio functions9.8Jan 28, 2025