Security readout for executives and security teams
Plain-English summary
CVAT versions 2.2.0 through 2.54.0 have a high-severity cross-site scripting flaw. A malicious label or skeleton SVG can run JavaScript in another user’s CVAT session after user interaction. This could let an attacker temporarily access CVAT resources available to that victim user. Version 2.55.0 fixes the issue.
Executive priority
Prioritize remediation for CVAT environments used by multiple teams or external contributors. The issue can expose data accessible to victim users, but available sources indicate a fixed release and do not indicate known active exploitation.
Technical view
CVE-2026-23516 is CWE-83 XSS in cvat-ai CVAT. Attack paths include crafted labels in tasks or projects that victims edit or view through associated shapes, and crafted SVG images uploaded during skeleton configuration. CVSS 4.0 score is 8.6. The vendor advisory states affected versions are >=2.2.0 and <2.55.0, fixed in 2.55.0.
Likely exposure
Organizations running self-hosted or managed CVAT instances on versions 2.2.0 through 2.54.0 are potentially exposed, especially where untrusted or lower-privileged users can create labels, tasks, projects, or skeleton SVG inputs.
Exploitation context
The source bundle does not show CISA KEV listing or public evidence of active exploitation. Exploitation requires the attacker to create malicious content and get a victim to interact with it or upload a crafted SVG in a relevant workflow.
Researcher notes
Key constraints are user interaction and attacker ability to introduce crafted CVAT content. The advisory identifies two vectors: labels referenced by shapes and skeleton SVG upload. Avoid assuming broader CVAT versions or exploitation evidence beyond the cited advisory and CVE data.
Mitigation direction
- Upgrade CVAT to version 2.55.0 or later.
- Review the GitHub security advisory for vendor-specific upgrade guidance.
- Restrict label, task, project, and skeleton configuration permissions until patched.
- Treat SVG uploads and labels from untrusted users as higher risk.
- Monitor CVAT sessions and audit logs for unusual access after suspicious content interactions.
Validation and detection
- Inventory CVAT deployments and record running versions.
- Confirm no instance is running CVAT 2.2.0 through 2.54.0.
- Verify upgraded instances report CVAT 2.55.0 or later.
- Review user permissions for creating labels, projects, tasks, and skeletons.
- Check recent CVAT audit activity for unexpected access by user accounts.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-83: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2026-23516 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 8.6 (4.0)
- Known Exploited
- No
- Published
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N——Primary CVE scoreVulnerability scoring details
Base CVSS 4.0 score
8.6HighVector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/cvat-ai/cvat/security/advisories/GHSA-3m7p-wx65-c7mpCVE reference · x_refsource_CONFIRM
- https://github.com/cvat-ai/cvat/commit/40800707fe39e3ff76c8d036eb953eb12d764e70CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Improper Neutralization of Script in Attributes in a Web Page
Improper Neutralization of Script in Attributes in a Web Page represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.