CVE-2026-80426

HighCVSS 7.1

Published: 26/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 26/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

FiftyOne renders a dataset field's description as markup. The sidebar field-information component passes the description to dangerouslySetInnerHTML without sanitization, allowing stored markup to execute on hover. Since the description is stored in the schema and travels with exported datasets, opening a dataset from another party can run malicious scripts in the app's origin.

Risk Assessment

An attacker can inject a script that reads local files and performs actions on data as the viewing user, due to shared origin with the FiftyOne server and lack of authentication in the open-source version.

Recommendation

Sanitize or avoid rendering field descriptions as HTML, e.g., by rendering as text. Additionally, secure the FiftyOne server against unauthenticated access to media routes.

Other vulnerabilities in FiftyOne

CVE-2026-53656Medium
FiftyOne prior to 1.17.0 has a vulnerability where the App/API server and the /media route unconditionally return Access-Control-Allow-Origin: *. Because the embedded server is local and unauthenticated, a malicious website visited by the user can read cross-origin responses. The /media endpoint accepts a filesystem path, allowing a drive-by page to read files accessible to the server process and exfiltrate them without additional clicks.

Original NVD description (English source)

FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/components/FieldLabelAndInfo/index.tsx passes the description string to React's dangerouslySetInnerHTML, and no layer between storage and render escapes or sanitises it; the neighbouring info values in the same component are rendered as React children and are escaped, so the description is the only raw path. A description is free-form text held in the dataset schema, so it persists in the database and travels with an exported or published dataset. Opening a dataset obtained from another party and hovering the field runs the stored markup in the application's origin. That origin is shared with the FiftyOne server, whose media route returns the contents of a caller-named absolute path and which is unauthenticated in the open-source server, so the injected script can read local files and reach the dataset and operator endpoints as the viewing user.