cvat has 2 CVEs on record between 2025 and 2026. The median CVSS is 4.3 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 1
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-58373Medium· 4.3CVAT before 2.69.0 contains an improper authorization vulnerability in QualityReportViewSet.get_queryset that allows authenticated attackers to enumerate quality report identifiers belonging to other organizations by exploiting a missing…24CVE-2025-68430Medium· 4.3CVAT is an open source interactive video and image annotation tool for computer vision24
cvat vulnerabilities
CVEs affecting cvat, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-58373Medium· 4.3CVAT before 2.69.0 contains an improper authorization vulnerability in QualityReportViewSet.get_queryset that allows authenticated attackers to enumerate quality report identifiers belonging to other organizations by exploiting a missing…
CVAT before 2.69.0 contains an improper authorization vulnerability in QualityReportViewSet.get_queryset that allows authenticated attackers to enumerate quality report identifiers belonging to other organizations by exploiting a missing…
▾ Sunlitcvat · computer_vision_annotation_toolEPSS 0.34%via NVD
CVE-2025-68430Medium· 4.3CVAT is an open source interactive video and image annotation tool for computer vision
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.8.1 through 2.52.0, an attacker with an account on a CVAT instance is able to retrieve the contents of any file system directory access…
▾ Sunlitcvat · computer_vision_annotation_toolEPSS 0.29%via NVD