๐Ÿ” CVE Alert

CVE-2026-82833

MEDIUM 6.3

Doccano Open Source Annotation Tools for Machine Learning Practitioners Project Example Detail Endpoint examples ExampleDetail access control

CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th

A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. Affected by this issue is the function ExampleDetail of the file /v1/projects/1/examples/ of the component Project Example Detail Endpoint. Such manipulation leads to improper access controls. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE CWE-284 CWE-266
Vendor doccano
Product open source annotation tools for machine learning practitioners
Published Aug 31, 2026
Stay Ahead of the Next One

Get instant alerts for doccano open source annotation tools for machine learning practitioners

Be the first to know when new medium vulnerabilities affecting doccano open source annotation tools for machine learning practitioners are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

Doccano / Open Source Annotation Tools for Machine Learning Practitioners
1.8.0 1.8.1 1.8.2 1.8.3 1.8.4 1.8.5
Doccano / Auto Labeling Pipeline Module to Annotate a Document Automatically
1.8.0 1.8.1 1.8.2 1.8.3 1.8.4 1.8.5

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
vuldb.com: https://vuldb.com/vuln/397245 vuldb.com: https://vuldb.com/vuln/397245/cti vuldb.com: https://vuldb.com/cve/CVE-2026-82833 vuldb.com: https://vuldb.com/submit/876617 drive.google.com: https://drive.google.com/file/d/1gqrFfbP7dSSp4Pf-4iEoPtNR7WjSZPML/view?usp=drive_link

Credits

๐Ÿ” Stephen Lin (VulDB User) VulDB CNA Team