Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component (WebView) running on the affected product, resulting in the displayed content being altered.

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component (WebView) running on the affected product, resulting in the displayed content being altered.

Miraikan Assist App provided by Japan Science and Technology Agency (JST) contains the following vulnerability.<a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><ul><li>Cross-site scripting (CWE-79) - CVE-2026-73537</li></ul>RyotaK of GMO Flatt Security Inc. reported this vulnerability to the developer and coordinated. After the coordination was completed, RyotaK reported the case to JPCERT/CC to notify users of the solution through JVN.