Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:49:37 +0000 CVE-2026-47682 — CVAT: Missing path-containment validation in multiple entry points allows arbitrary path writes https://cve.radiocsirt.org/vuln/cve-2026-47682 <p><strong>Affected:</strong> cvat-ai cvat</p> <p>CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.6.0 through 2.64.0, an attacker with write access to a cloud storage that&#39;s been added to a CVAT instance, or ability to add new cloud storages, is able to overwrite arbitrary files on the server&#39;s filesystem. This issue has been fixed in version 2.65.0.</p> <p><strong>Affected:</strong> cvat-ai cvat</p> <p>CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.6.0 through 2.64.0, an attacker with write access to a cloud storage that&#39;s been added to a CVAT instance, or ability to add new cloud storages, is able to overwrite arbitrary files on the server&#39;s filesystem. This issue has been fixed in version 2.65.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-47682