CVE-2026-41512

ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in `BrowserAutomation::PlaywrightService`. This issue has been patched in version 1.4.1.

CVSS v3 9.9 CRITICAL

9.9^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.1 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/0din-ai/ai-scanner/releases/tag/v1.4.1	Patch Product
https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr	Exploit Vendor Advisory
https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:mozilla:0din_scanner:*:*:*:*:*:*:*:*

History

26 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) ai-scanner es un escáner de seguridad de modelos de IA construido sobre NVIDIA garak. Desde la versión 1.0.0 hasta antes de la versión 1.4.1, existe una vulnerabilidad de ejecución remota de código mediante inyección de JavaScript en ’BrowserAutomation::PlaywrightService’. Este problema ha sido parcheado en la versión 1.4.1.

Information

Published : 2026-05-08 14:16

Updated : 2026-10-26 19:10

NVD link : CVE-2026-41512

Mitre link : CVE-2026-41512

CVE.ORG link : CVE-2026-41512

JSON object : View

Products Affected

mozilla

0din_scanner

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2026-41512", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-41512", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-08T17:04:46.709991Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "0din-ai", "product": "ai-scanner", "versions": [{"status": "affected", "version": ">= 1.0.0, < 1.4.1"}]}]}], "published": "2026-05-08T14:16:34.433", "references": [{"url": "https://github.com/0din-ai/ai-scanner/releases/tag/v1.4.1", "tags": ["Patch", "Product"], "source": "security-advisories@github.com"}, {"url": "https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr", "tags": ["Exploit", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in `BrowserAutomation::PlaywrightService`. This issue has been patched in version 1.4.1."}, {"lang": "es", "value": "ai-scanner es un esc\u00e1ner de seguridad de modelos de IA construido sobre NVIDIA garak. Desde la versi\u00f3n 1.0.0 hasta antes de la versi\u00f3n 1.4.1, existe una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo mediante inyecci\u00f3n de JavaScript en \u2019BrowserAutomation::PlaywrightService\u2019. Este problema ha sido parcheado en la versi\u00f3n 1.4.1."}], "lastModified": "2026-10-26T19:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:0din_scanner:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "181C627F-1DB3-4C79-B6D4-3245A2663F2F", "versionEndExcluding": "1.4.1", "versionStartIncluding": "1.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}