---
id: "CVE-2026-116555"
kind: "vulnerability"
aliases: ["CVE-2026-116555"]
title: "Argilla: template argument in Sandbox component enables cross-site scripting"
severity: "low"
cvss: 3.3
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["argilla", "package", "python", "self-hosted"]
not_affected_if: ["unknown"]
published_at: "2026-10-26T23:16:59+00:00"
first_seen_at: "2026-10-26T23:25:48+00:00"
updated_at: "2026-10-26T23:26:04+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116555", "first_seen_at": "2026-10-26T23:25:48+00:00"}]
---

# Argilla: template argument in Sandbox component enables cross-site scripting

An unknown function in the Sandbox.vue annotation component of Argilla up to 2.8.0 mishandles the template argument, allowing cross-site scripting. An attacker who gets a crafted template into the app can run scripts in a user's browser session.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Argilla version (`2.8.0` and earlier are listed as affected)
- Look for `argilla-frontend/components/features/annotation/container/fields/sandbox/Sandbox.vue` in the deployed source if you build from it
- unknown whether the sources give a configuration check beyond the version

## Fix

- unknown: the sources report no vendor fix and the project had not responded at time of writing
- Restrict who can create or edit annotation templates until a fixed release is published

## Timeline

- 2026-10-26T23:25:48+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116555

## From the sources

A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-frontend/components/features/annotation/container/fields/sandbox/Sandbox.vue. The manipulation of the argument template leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_