High severity · published May 13, 2026
CVE-2026-44369
CVAT: Stored XSS via annotation guides
8.5
CVSS
0.3%
EPSS
No
On KEV
Description
CVAT is an open source interactive video and image annotation tool for computer vision. From 2.5.0 to 2.63.0, an attacker who is able to create or edit an annotation guide on a task is able to add malicious JavaScript code, which will then run in the browser of anyone who opens this annotation guide. This code will be able to make arbitrary requests to CVAT with the victim user's privileges. This vulnerability is fixed in 2.64.0.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CV
cvat · cvat-ai
>= 2.5.0, < 2.64.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-44369
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-44369
github.com
https://github.com/cvat-ai/cvat/commit/ad9e90003d8234ac7602598b109dc11450321dfc
github.com
https://github.com/cvat-ai/cvat/security/advisories/GHSA-m2h7-6xqm-p9v5
More from cvat
9.8
CVE-2022-31188
Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)
8.5
CVE-2026-73220
CVAT: Stored XSS via annotation guides in audio tasks
8.5
CVE-2026-65986
CVAT has stored XSS via annotation guide assets
7.1
CVE-2026-47682
CVAT: Missing path-containment validation in multiple entry points allows arbitrary path writes
6.4
CVE-2024-45393
Computer Vision Annotation Tool (CVAT) is missing authorization for endpoints related to webhook deliveries