CVE-2026-4992 in wandb OpenUI

요약 (영어)

A flaw has been found in wandb OpenUI up to 1.0. This affects the function create_share/get_share of the file backend/openui/server.py of the component HTMLAnnotator Component. Executing a manipulation of the argument ID can lead to HTML injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

공개

2026. 03. 28.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
353879	wandb OpenUI HTMLAnnotator server.py get_share HTML injection	79	개념 증명	정의되지 않음	CVE-2026-4992