Security Advisory

CVE-2026-47682

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-04 20:00:49

Last updated 2026-08-05 14:04:05

Assigner GitHub_M

CVSS score not scored

State PUBLISHED

Description

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.6.0 through 2.64.0, an attacker with write access to a cloud storage that's been added to a CVAT instance, or ability to add new cloud storages, is able to overwrite arbitrary files on the server's filesystem. This issue has been fixed in version 2.65.0.

← Browse all CVEs View on cve.org ↗