CVE-2025-23045 CVAT allows remote code execution via tracker Nuclio functions
Authenticated attackers can execute arbitrary code in Nuclio function containers via unsafe deserialization in specific tracker functions.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-23045?
CVE-2025-23045 is a high-severity unsafe deserialization vulnerability in cvat-ai cvat, published on 28 Jan 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with an account on an affected CVAT instance is able to run arbitrary code in the context of the Nuclio function container. This vulnerability affects CVAT deployments that run any of the serverless functions of type tracker from the CVAT Git repository, namely TransT and SiamMask. Deployments with custom functions of type tracker may also be affected, depending on how they handle state serialization. If a function uses an unsafe serialization library such as pickle or jsonpickle, it's likely to be vulnerable. Upgrade to CVAT 2.26.0 or later. If you are unable to upgrade, shut down any instances of the TransT or SiamMask functions you're running.
Weakness: CWE-502
Which versions are affected by CVE-2025-23045?
It affects 1 product.
Products include Cvat Computer Vision Annotation Tool.
How do I fix CVE-2025-23045?
No fix has been published for CVE-2025-23045 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2025-23045 being exploited?
There is no known exploitation of CVE-2025-23045 in the wild and no public exploit code.
Other vulnerabilities in cvat-ai cvat
- CVE-2026-23516 CVAT vulnerable to XSS via skeleton SVG images
- CVE-2022-31188 Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)
- CVE-2026-23526 CVAT vulnerable to privilege escalation of users with staff status
- CVE-2024-37164 CVAT SSRF via custom cloud storage endpoints
- CVE-2024-37306 CVAT's export and backup-related API endpoints are susceptible to CSRF
Sources
Also known as GHSA-wq36-mxf8-hv62.