CVE-2026-116554 | Argilla up to 2.8.0 Settings Page SettingsInfo.vue Dataset.from_disk name cross site scripting (Issue 5875)

October 26, 2026 Yanac

A vulnerability classified as problematic was found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla-frontend/components/features/annotation/settings/SettingsInfo.vue of the component Settings Page. Executing a manipulation of the argument Name can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-116554. The attack may be launched remotely. Furthermore, there is an exploit available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More