Low severity2.4NVD Advisory· Published Oct 26, 2026

CVE-2026-116556

Description

A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/components/features/annotation/container/fields/text-field/TextField.vue. The manipulation of the argument text results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Argilla/argillallm-create
Range: <=2.8.0

Patches

Vulnerability mechanics

References

github.com/3em0/cve_repo/tree/main/2026/argilla-io.argilla_stored_xss_textfield_v_html/pocnvd
github.com/argilla-io/argilla/issues/5877nvd
vuldb.com/cve/CVE-2026-116556nvd
vuldb.com/submit/1022940nvd
vuldb.com/vuln/426457nvd
vuldb.com/vuln/426457/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.156
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000