CVE-2026-73220

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.68.0 until 2.70.0, the audio-task annotation guide renderer in cvat-ui/src/audio/components/annotation-page/audio-workspace/top-bar/audio-right-group.tsx passes attacker-controlled guide Markdown to MDEditor without the rehype-sanitize plugin. A user who can create or edit an annotation guide can store malicious JavaScript that executes when another user opens the guide. The script can issue arbitrary CVAT requests with the victim user's privileges. This issue is fixed in version 2.70.0.

CVSS

No CVSS.

References

Link	Resource
https://github.com/cvat-ai/cvat/commit/33aaa1987ea89a4d229bf4c19fcbe6b04ed55b42
https://github.com/cvat-ai/cvat/pull/10893
https://github.com/cvat-ai/cvat/releases/tag/v2.70.0
https://github.com/cvat-ai/cvat/security/advisories/GHSA-chxx-45vm-qhc9

Configurations

No configuration.

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) CVAT es una herramienta de anotación interactiva de vídeo e imagen de código abierto para visión por computadora. Desde la versión 2.68.0 hasta la 2.70.0, el renderizador de la guía de anotación de tareas de audio en cvat-ui/src/audio/components/annotation-page/audio-workspace/top-bar/audio-right-group.tsx pasa Markdown de guía controlado por el atacante a MDEditor sin el plugin rehype-sanitize. Un usuario que puede crear o editar una guía de anotación puede almacenar JavaScript malicioso que se ejecuta cuando otro usuario abre la guía. El script puede emitir solicitudes CVAT arbitrarias con los privilegios del usuario víctima. Este problema está solucionado en la versión 2.70.0.

Information

Published : 2026-08-20 15:18

Updated : 2026-10-18 20:10

NVD link : CVE-2026-73220

Mitre link : CVE-2026-73220

CVE.ORG link : CVE-2026-73220

JSON object : View

Products Affected

No product.

CWE

CWE-80

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

{"id": "CVE-2026-73220", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-73220", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-20T16:55:41.665322Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.5, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "cvat-ai", "product": "cvat", "versions": [{"status": "affected", "version": ">= 2.68.0, < 2.70.0"}]}]}], "published": "2026-08-20T15:18:37.200", "references": [{"url": "https://github.com/cvat-ai/cvat/commit/33aaa1987ea89a4d229bf4c19fcbe6b04ed55b42", "source": "security-advisories@github.com"}, {"url": "https://github.com/cvat-ai/cvat/pull/10893", "source": "security-advisories@github.com"}, {"url": "https://github.com/cvat-ai/cvat/releases/tag/v2.70.0", "source": "security-advisories@github.com"}, {"url": "https://github.com/cvat-ai/cvat/security/advisories/GHSA-chxx-45vm-qhc9", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-80"}]}], "descriptions": [{"lang": "en", "value": "CVAT is an open source interactive video and image annotation tool for computer vision. From 2.68.0 until 2.70.0, the audio-task annotation guide renderer in cvat-ui/src/audio/components/annotation-page/audio-workspace/top-bar/audio-right-group.tsx passes attacker-controlled guide Markdown to MDEditor without the rehype-sanitize plugin. A user who can create or edit an annotation guide can store malicious JavaScript that executes when another user opens the guide. The script can issue arbitrary CVAT requests with the victim user's privileges. This issue is fixed in version 2.70.0."}, {"lang": "es", "value": "CVAT es una herramienta de anotaci\u00f3n interactiva de v\u00eddeo e imagen de c\u00f3digo abierto para visi\u00f3n por computadora. Desde la versi\u00f3n 2.68.0 hasta la 2.70.0, el renderizador de la gu\u00eda de anotaci\u00f3n de tareas de audio en cvat-ui/src/audio/components/annotation-page/audio-workspace/top-bar/audio-right-group.tsx pasa Markdown de gu\u00eda controlado por el atacante a MDEditor sin el plugin rehype-sanitize. Un usuario que puede crear o editar una gu\u00eda de anotaci\u00f3n puede almacenar JavaScript malicioso que se ejecuta cuando otro usuario abre la gu\u00eda. El script puede emitir solicitudes CVAT arbitrarias con los privilegios del usuario v\u00edctima. Este problema est\u00e1 solucionado en la versi\u00f3n 2.70.0."}], "lastModified": "2026-10-18T20:10:00.110", "sourceIdentifier": "security-advisories@github.com"}