{"id":"CVE-2026-116556","kind":"vulnerability","aliases":["CVE-2026-116556"],"related":[],"title":"Argilla: cross-site scripting in annotation text field component","description":"A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/components/features/annotation/container/fields/text-field/TextField.vue. The manipulation of the argument text results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.","summary":"Argilla up to version 2.8.0 has a cross-site scripting flaw in its annotation TextField component. A remote attacker who gets a crafted text value into a record can run script in the browser of a user who views it.","severity":"low","cvss":3.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["argilla","package","python","self-hosted"],"not_affected_if":["unknown"],"how_to_check":"- Check the installed Argilla version against `2.8.0`\n- unknown","fix":"- Upgrade Argilla past `2.8.0` once a fixed release is published\n- unknown","status":"open","published_at":"2026-10-26T23:16:59+00:00","first_seen_at":"2026-10-26T23:25:48+00:00","triaged_at":"2026-10-26T23:26:03+00:00","updated_at":"2026-10-26T23:26:03+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-26T23:26:03Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Argilla past `2.8.0` once a fixed release is published\n- unknown","reach":"internet","title":"Argilla: cross-site scripting in annotation text field component","impact":"medium","summary":"Argilla up to version 2.8.0 has a cross-site scripting flaw in its annotation TextField component. A remote attacker who gets a crafted text value into a record can run script in the browser of a user who views it.","category":"package","nicknames":[],"who_cares":["argilla","self-hosted","python"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Script runs in annotator browser sessions","analyst_note":"Confirm whether a fixed Argilla release exists and whether the attack needs an account; check the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-116556.","how_to_check":"- Check the installed Argilla version against `2.8.0`\n- unknown","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Teams running self-hosted Argilla up to and including 2.8.0 where annotators or reviewers open datasets that contain untrusted text. The sources do not say whether a fixed version exists or whether the project has responded. Deployments that do not expose the annotation interface to untrusted data have less exposure.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000581,"input_tokens":3331,"output_tokens":495,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-116556':13A,16A '-2026':12A,15A '/components/features/annotation/container/fields/text-field/textfield.vue':83C '2.8.0':27B,71C 'affect':73C 'annot':7A,37B 'argilla':1A,17B,23B,68C,81C 'argilla-frontend':80C 'argument':88C 'attack':42B,96C 'browser':57B 'compon':10A,39B 'could':108C 'craft':46B 'cross':3A,31B,92C 'cross-sit':2A,30B 'cve':11A,14A 'earli':118C 'execut':99C 'exploit':102C 'field':9A 'file':79C 'flaw':34B 'found':66C 'frontend':82C 'function':76C 'get':44B 'host':22B 'inform':114C 'issu':121C 'made':105C 'manipul':85C 'packag':18B 'problem':117C 'project':112C 'public':106C 'python':19B 'record':51B 'remot':41B,100C 'report':122C 'respond':126C 'result':90C 'run':53B 'script':5A,33B,54B,94C 'self':21B 'self-host':20B 'site':4A,32B,93C 'text':8A,47B,89C 'textfield':38B 'unknown':75C 'use':110C 'user':60B 'valu':48B 'version':26B 'view':62B 'vulner':64C 'yet':127C","nicknames":[],"mitigations":[],"who_affected":"Teams running self-hosted Argilla up to and including 2.8.0 where annotators or reviewers open datasets that contain untrusted text. The sources do not say whether a fixed version exists or whether the project has responded. Deployments that do not expose the annotation interface to untrusted data have less exposure.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T23:16:59+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116556","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116556","severity":null,"published_at":"2026-10-26T23:16:59+00:00","modified_at":"2026-10-26T23:16:59+00:00","first_seen_at":"2026-10-26T23:25:48+00:00","fetched_at":"2026-10-26T23:25:48+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}