Skip to contentCvat-ai Cvat vulnerabilities
- cvat-ai cvatCVAT: Stored XSS via annotation guides in audio tasksCVE-2026-732208.5 High
- cvat-ai cvatCVAT: Flawed authorization logic in endpoints related to lambda requestsCVE-2026-732215.3 Medium
- cvat-ai cvatCVAT: Denial of service with regards to automatic annotationCVE-2026-732195.3 Medium
- cvat-ai cvatCVAT has stored XSS via annotation guide assetsCVE-2026-659868.5 High
- cvat-ai cvatCVAT: Missing path-containment validation in multiple entry points allows arbitrary path writesCVE-2026-476827.1 High
- cvat-ai cvat, cvat computer vision annotation tool +1 moreCVAT < 2.69.0 - Missing Authorization on Quality Reports parent_id Filter Leaks Cross-Organization Report ExistenceCVE-2026-583735.3 Medium
- cvat-ai cvatCVAT: Stored XSS via annotation guidesCVE-2026-443698.5 High
- cvat-ai cvat, cvat computer vision annotation tool +1 moreCVAT vulnerable to privilege escalation of users with staff statusCVE-2026-235268.5 High
- cvat-ai cvat, cvat computer vision annotation tool +1 moreCVAT vulnerable to XSS via skeleton SVG imagesCVE-2026-235168.6 High
- cvat-ai cvat, cvat computer vision annotation tool +1 moreCVAT vulnerable to directory traversal via mounted share listingCVE-2025-684305.3 Medium
- cvat-ai cvatCVAT: Mounted share file overwrite via crafted requestCVE-2025-644855.3 Medium
- cvat-ai cvat, cvat computer vision annotation tool +1 moreCVAT vulnerable to email verification bypass by use of basic authenticationCVE-2025-545734.3 Medium
- cvat-ai cvat, cvat computer vision annotation tool +1 moreCVAT missing validation for in-progress backup upload namesCVE-2025-491355.3 Medium
- cvat computer vision annotation tool, cvat-ai cvat +1 moreCVAT has information disclosure via browsable APICVE-2025-483815.3 Medium
- cvat computer vision annotation tool, cvat-ai cvat +1 moreCVAT allows remote code execution via tracker Nuclio functionsCVE-2025-230458.7 High
- cvat computer vision annotation tool, cvat-ai cvat +1 moreComputer Vision Annotation Tool (CVAT) access control is broken in several PATCH endpointsCVE-2024-471725.4 Medium
- cvat computer vision annotation tool, cvat-ai cvat +1 moreComputer Vision Annotation Tool (CVAT) contains a reflected XSS via request endpointsCVE-2024-470646.3 Medium
- cvat computer vision annotation tool, cvat-ai cvat +1 moreComputer Vision Annotation Tool (CVAT) contains a stored XSS via the quality report data endpointCVE-2024-470636.2 Medium
- cvat computer vision annotation tool, cvat-ai cvat +1 moreComputer Vision Annotation Tool (CVAT) is missing authorization for endpoints related to webhook deliveriesCVE-2024-453936.4 Medium
- cvat computer vision annotation tool, cvat +1 moreCVAT's export and backup-related API endpoints are susceptible to CSRFCVE-2024-373067.1 High
- cvat computer vision annotation tool, cvat-ai cvat +1 moreCVAT SSRF via custom cloud storage endpointsCVE-2024-371647.1 High
- cvat computer vision annotation tool, cvat-ai cvat +1 moreServer-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)CVE-2022-31188Public exploitEPSS 48.2%8.6 High