CVE-2026-116556 | Argilla up to 2.8.0 TextField.vue text cross site scripting (Issue 5877)

October 26, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/components/features/annotation/container/fields/text-field/TextField.vue. The manipulation of the argument text results in cross site scripting.

This vulnerability is identified as CVE-2026-116556. The attack can be executed remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More