CVE-2026-23516 CVAT vulnerable to XSS via skeleton SVG images
Attackers can execute arbitrary JavaScript in victim sessions via malicious labels or SVG images, gaining temporary access to user resources.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-23516?
CVE-2026-23516 is a high-severity cross-site scripting vulnerability in cvat-ai cvat, published on 21 Jan 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.2.0 through 2.54.0, an attacker is able to execute arbitrary JavaScript in a victim user's CVAT UI session, provided that they are able to create a maliciously crafted label in a CVAT task or project, then get the victim user to either edit that label, or view a shape that refers to that label; and/or get the victim user to upload a maliciously crafted SVG image when configuring a skeleton. This gives the attacker temporary access to all CVAT resources that the victim user can access. Version 2.55.0 fixes the issue.
Which versions are affected by CVE-2026-23516?
It affects 1 product.
Products include Cvat Computer Vision Annotation Tool.
How do I fix CVE-2026-23516?
No fix has been published for CVE-2026-23516 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2026-23516 being exploited?
There is no known exploitation of CVE-2026-23516 in the wild and no public exploit code.
Other vulnerabilities in cvat-ai cvat
- CVE-2025-23045 CVAT allows remote code execution via tracker Nuclio functions
- CVE-2022-31188 Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)
- CVE-2026-23526 CVAT vulnerable to privilege escalation of users with staff status
- CVE-2024-37164 CVAT SSRF via custom cloud storage endpoints
- CVE-2024-37306 CVAT's export and backup-related API endpoints are susceptible to CSRF
Sources
Also known as GHSA-3m7p-wx65-c7mp.