# cvat.

Every CVE that names cvat among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [CVAT: Stored XSS via annotation guides in audio tasks](https://agentprime.io/advisories/CVE-2026-73220.md)
  `CVE-2026-73220` · CVE record: cvat-ai cvat · CVSS 8.5 High · Not analysed yet · Published 20 Aug 2026 · Tags: Cross-site scripting (XSS)
- [CVAT: Flawed authorization logic in endpoints related to lambda requests](https://agentprime.io/advisories/CVE-2026-73221.md)
  `CVE-2026-73221` · CVE record: cvat-ai cvat · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Broken access control
- [CVAT: Denial of service with regards to automatic annotation](https://agentprime.io/advisories/CVE-2026-73219.md)
  `CVE-2026-73219` · CVE record: cvat-ai cvat · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-1288
- [CVAT has stored XSS via annotation guide assets](https://agentprime.io/advisories/CVE-2026-65986.md)
  `CVE-2026-65986` · CVE record: cvat-ai cvat · CVSS 8.5 High · Not analysed yet · Published 4 Aug 2026 · Tags: Cross-site scripting (XSS), Unrestricted file upload
- [CVAT: Missing path-containment validation in multiple entry points allows arbitrary path writes](https://agentprime.io/advisories/CVE-2026-47682.md)
  `CVE-2026-47682` · CVE record: cvat-ai cvat · CVSS 7.1 High · Not analysed yet · Published 4 Aug 2026 · Tags: Path traversal
- [CVAT < 2.69.0 - Missing Authorization on Quality Reports parent_id Filter Leaks Cross-Organization Report Existence](https://agentprime.io/advisories/CVE-2026-58373.md)
  `CVE-2026-58373` · CVE record: cvat-ai cvat · CVSS 5.3 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Broken access control
- [CVAT: Stored XSS via annotation guides](https://agentprime.io/advisories/CVE-2026-44369.md)
  `CVE-2026-44369` · CVE record: cvat-ai cvat · CVSS 8.5 High · Not analysed yet · Published 13 May 2026 · Tags: Cross-site scripting (XSS)
- [CVAT vulnerable to privilege escalation of users with staff status](https://agentprime.io/advisories/CVE-2026-23526.md)
  `CVE-2026-23526` · CVE record: cvat-ai cvat · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: Privilege escalation
- [CVAT vulnerable to XSS via skeleton SVG images](https://agentprime.io/advisories/CVE-2026-23516.md)
  `CVE-2026-23516` · CVE record: cvat-ai cvat · CVSS 8.6 High · Not analysed yet · Published 21 Jan 2026 · Tags: Cross-site scripting (XSS)
- [CVAT vulnerable to directory traversal via mounted share listing](https://agentprime.io/advisories/CVE-2025-68430.md)
  `CVE-2025-68430` · CVE record: cvat-ai cvat · CVSS 5.3 Medium · Not analysed yet · Published 19 Dec 2025 · Tags: Path traversal
- [CVAT: Mounted share file overwrite via crafted request](https://agentprime.io/advisories/CVE-2025-64485.md)
  `CVE-2025-64485` · CVE record: cvat-ai cvat · CVSS 5.3 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: Path traversal
- [CVAT vulnerable to email verification bypass by use of basic authentication](https://agentprime.io/advisories/CVE-2025-54573.md)
  `CVE-2025-54573` · CVE record: cvat-ai cvat · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2025 · Tags: Authentication bypass
- [CVAT missing validation for in-progress backup upload names](https://agentprime.io/advisories/CVE-2025-49135.md)
  `CVE-2025-49135` · CVE record: cvat-ai cvat · CVSS 5.3 Medium · Not analysed yet · Published 25 Jun 2025 · Tags: Broken access control
- [CVAT has information disclosure via browsable API](https://agentprime.io/advisories/CVE-2025-48381.md)
  `CVE-2025-48381` · CVE record: cvat-ai cvat · CVSS 5.3 Medium · Not analysed yet · Published 30 May 2025 · Tags: Information disclosure
- [CVAT allows remote code execution via tracker Nuclio functions](https://agentprime.io/advisories/CVE-2025-23045.md)
  `CVE-2025-23045` · CVE record: cvat-ai cvat · CVSS 8.7 High · Not analysed yet · Published 28 Jan 2025 · Tags: Insecure deserialization
- [Computer Vision Annotation Tool (CVAT) access control is broken in several PATCH endpoints](https://agentprime.io/advisories/CVE-2024-47172.md)
  `CVE-2024-47172` · CVE record: cvat-ai cvat · CVSS 5.4 Medium · Not analysed yet · Published 30 Sept 2024 · Tags: Broken access control
- [Computer Vision Annotation Tool (CVAT) contains a reflected XSS via request endpoints](https://agentprime.io/advisories/CVE-2024-47064.md)
  `CVE-2024-47064` · CVE record: cvat-ai cvat · CVSS 6.3 Medium · Not analysed yet · Published 30 Sept 2024 · Tags: Cross-site scripting (XSS), CWE-81
- [Computer Vision Annotation Tool (CVAT) contains a stored XSS via the quality report data endpoint](https://agentprime.io/advisories/CVE-2024-47063.md)
  `CVE-2024-47063` · CVE record: cvat-ai cvat · CVSS 6.2 Medium · Not analysed yet · Published 30 Sept 2024 · Tags: Cross-site scripting (XSS)
- [Computer Vision Annotation Tool (CVAT) is missing authorization for endpoints related to webhook deliveries](https://agentprime.io/advisories/CVE-2024-45393.md)
  `CVE-2024-45393` · CVE record: cvat-ai cvat · CVSS 6.4 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: Broken access control
- [CVAT's export and backup-related API endpoints are susceptible to CSRF](https://agentprime.io/advisories/CVE-2024-37306.md)
  `CVE-2024-37306` · CVE record: cvat-ai cvat · CVSS 7.1 High · Not analysed yet · Published 13 Jun 2024 · Tags: Cross-site request forgery (CSRF)
- [CVAT SSRF via custom cloud storage endpoints](https://agentprime.io/advisories/CVE-2024-37164.md)
  `CVE-2024-37164` · CVE record: cvat-ai cvat · CVSS 7.1 High · Not analysed yet · Published 13 Jun 2024 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)](https://agentprime.io/advisories/CVE-2022-31188.md)
  `CVE-2022-31188` · CVE record: cvat-ai cvat · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.48 · Not analysed yet · Published 1 Aug 2022 · Tags: Server-side request forgery (SSRF)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cvat>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cvat/>. Everything for agents: <https://agentprime.io/llms.txt>.