{"id":"CVE-2026-116555","kind":"vulnerability","aliases":["CVE-2026-116555"],"related":[],"title":"Argilla: template argument in Sandbox component enables cross-site scripting","description":"A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-frontend/components/features/annotation/container/fields/sandbox/Sandbox.vue. The manipulation of the argument template leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.","summary":"An unknown function in the Sandbox.vue annotation component of Argilla up to 2.8.0 mishandles the template argument, allowing cross-site scripting. An attacker who gets a crafted template into the app can run scripts in a user's browser session.","severity":"low","cvss":3.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["argilla","package","python","self-hosted"],"not_affected_if":["unknown"],"how_to_check":"- Check the installed Argilla version (`2.8.0` and earlier are listed as affected)\n- Look for `argilla-frontend/components/features/annotation/container/fields/sandbox/Sandbox.vue` in the deployed source if you build from it\n- unknown whether the sources give a configuration check beyond the version","fix":"- unknown: the sources report no vendor fix and the project had not responded at time of writing\n- Restrict who can create or edit annotation templates until a fixed release is published","status":"open","published_at":"2026-10-26T23:16:59+00:00","first_seen_at":"2026-10-26T23:25:48+00:00","triaged_at":"2026-10-26T23:26:04+00:00","updated_at":"2026-10-26T23:26:04+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-26T23:26:04Z","model":"claude-haiku-5-5","output":{"fix":"- unknown: the sources report no vendor fix and the project had not responded at time of writing\n- Restrict who can create or edit annotation templates until a fixed release is published","reach":"internet","title":"Argilla: template argument in Sandbox component enables cross-site scripting","impact":"medium","summary":"An unknown function in the Sandbox.vue annotation component of Argilla up to 2.8.0 mishandles the template argument, allowing cross-site scripting. An attacker who gets a crafted template into the app can run scripts in a user's browser session.","category":"package","nicknames":[],"who_cares":["argilla","self-hosted","python"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Scripts run in other users' browser sessions on the Argilla site","analyst_note":"Check the NVD entry and the Argilla repository for a fixed release, the auth requirement for template input, and whether a public exploit or patch exists.","how_to_check":"- Check the installed Argilla version (`2.8.0` and earlier are listed as affected)\n- Look for `argilla-frontend/components/features/annotation/container/fields/sandbox/Sandbox.vue` in the deployed source if you build from it\n- unknown whether the sources give a configuration check beyond the version","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Teams running Argilla 2.8.0 or earlier with the annotation interface open to users who are not fully trusted, since the flaw is triggered through the template argument. Deployments limited to a small trusted group of annotators carry less risk. unknown whether a default configuration is exposed.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000634,"input_tokens":3349,"output_tokens":599,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-116555':14A,17A '-2026':13A,16A '/components/features/annotation/container/fields/sandbox/sandbox.vue':88C '2.8.0':36B,74C 'allow':41B 'annot':30B 'app':55B 'argilla':1A,18B,33B,71C,86C 'argilla-frontend':85C 'argument':3A,40B,93C 'attack':47B,104C 'browser':63B 'compon':6A,31B 'craft':51B 'cross':9A,43B,97C 'cross-sit':8A,42B 'cve':12A,15A 'disclos':111C 'earli':126C 'element':77C 'enabl':7A 'exploit':101C,108C 'file':84C 'found':69C 'frontend':87C 'function':26B,81C 'get':49B 'host':23B 'impact':76C 'inform':122C 'issu':129C 'lead':95C 'manipul':90C 'may':116C 'mishandl':37B 'packag':19B 'possibl':106C 'problem':125C 'project':120C 'public':114C 'python':20B 'remot':100C 'report':130C 'respond':134C 'run':57B 'sandbox':5A 'sandbox.vue':29B 'script':11A,45B,58B,99C 'self':22B 'self-host':21B 'session':64B 'site':10A,44B,98C 'templat':2A,39B,52B,94C 'unknown':25B,80C 'use':118C 'user':61B 'vulner':66C 'yet':135C","nicknames":[],"mitigations":[],"who_affected":"Teams running Argilla 2.8.0 or earlier with the annotation interface open to users who are not fully trusted, since the flaw is triggered through the template argument. Deployments limited to a small trusted group of annotators carry less risk. unknown whether a default configuration is exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T23:16:59+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116555","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116555","severity":null,"published_at":"2026-10-26T23:16:59+00:00","modified_at":"2026-10-26T23:16:59+00:00","first_seen_at":"2026-10-26T23:25:48+00:00","fetched_at":"2026-10-26T23:25:48+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}