CVE-2026-53656 | Voxel51 FiftyOne up to 1.16.9 Media Route fiftyone/server/app.py cross-domain policy

August 21, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Voxel51 FiftyOne up to 1.16.9. This affects an unknown function of the file fiftyone/server/app.py of the component Media Route. The manipulation results in permissive cross-domain policy with untrusted domains.

This vulnerability was named CVE-2026-53656. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More