CVE-2026-53656

MediumCVSS 6.3

Published: 21/08/2026(UTC)Updated: 21/08/2026(UTC)Translated: 22/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

1th percentile - higher than 1% of all known CVEs

Summary

FiftyOne prior to 1.17.0 has a vulnerability where the App/API server and the /media route unconditionally return Access-Control-Allow-Origin: *. Because the embedded server is local and unauthenticated, a malicious website visited by the user can read cross-origin responses. The /media endpoint accepts a filesystem path, allowing a drive-by page to read files accessible to the server process and exfiltrate them without additional clicks.

Risk Assessment

Risk of local file exfiltration by malicious websites, potentially leading to leakage of sensitive user data.

Recommendation

Update FiftyOne to version 1.17.0 or later, which enforces same-origin policy by default and allows configuration of allowed origins.

Other vulnerabilities in FiftyOne

CVE-2026-80426High
FiftyOne renders a dataset field's description as markup. The sidebar field-information component passes the description to dangerouslySetInnerHTML without sanitization, allowing stored markup to execute on hover. Since the description is stored in the schema and travels with exported datasets, opening a dataset from another party can run malicious scripts in the app's origin.

Original NVD description (English source)

FiftyOne is an open-source platform for refining high-quality datasets and visual AI models. Prior to 1.17.0, the FiftyOne App/API server in fiftyone/server/app.py and the /media route in fiftyone/server/routes/media.py unconditionally return Access-Control-Allow-Origin: *. Because the embedded server is local and unauthenticated, a malicious website visited by the user can read cross-origin responses. The /media endpoint accepts a filesystem path, allowing a drive-by page to read files accessible to the server process and exfiltrate them without additional clicks. The allowed_origins configuration and FIFTYONE_ALLOWED_ORIGINS environment variable now make cross-origin access explicit, while the default policy is same-origin. This issue is fixed in version 1.17.0.