CVE-2026-47682 cvat-ai CVE debrief

Who should care

Organizations using CVAT for computer vision tasks, especially those with write access to cloud storage added to CVAT instances or ability to add new cloud storages, should prioritize updating to version 2.65.0. Security teams and vulnerability management teams should review CVAT instance configurations and cloud storage access controls. Operators and platform administrators should ensure CVAT instances are updated and monitor for suspicious activity. This vulnerability can lead to arbitrary file overwrites, potentially impacting the integrity of computer vision tasks and data. CVAT instances with write access to cloud storage are at high risk. Security teams should review compensating controls and implement monitoring to detect potential exploitation attempts. Asset inventory and rollback/change windows should be considered to minimize potential impact. Source tracking can help identify potential vulnerabilities in CVAT instances. Organizations should also consider the potential operational impact of this vulnerability on their computer vision tasks and data. The vulnerability has a high CVSS score of 7.1, indicating a high severity vulnerability. Organizations should prioritize remediation based on their exposure and risk assessment. The CVE record and NVD details provide additional context for defenders to assess their risk and implement necessary mitigations. Defenders should verify CVAT instance configurations and cloud storage access controls to prevent exploitation. They should also monitor CVAT instances for suspicious activity and implement compensating controls to minimize potential impact. CVAT instances with write access to cloud storage are at high risk and should be prioritized for remediation. The vulnerability can be exploited by an attacker with write access to a cloud storage added to a CVAT instance or ability to add new cloud storages. The fix is in version 2.65.0, and organizations should plan to update CVAT instances to this version or later. Security teams should review the CVE record and NVD details to assess their risk and implement necessary mitigations. The vulnerability has a significant impact on the security of CVAT instances, and 2

Technical summary

CVAT versions 1.6.0 through 2.64.0 are vulnerable to arbitrary file overwrites due to improper handling of cloud storage. An attacker with write access to a cloud storage added to a CVAT instance or ability to add new cloud storages can overwrite arbitrary files on the server's filesystem. This issue is fixed in version 2.65.0. CVAT is used for computer vision tasks, and organizations should assess their exposure.

Defensive priority

Organizations using CVAT should prioritize updating to version 2.65.0 to prevent arbitrary file overwrites.

Recommended defensive actions

• Update CVAT to version 2.65.0 or later
• Restrict write access to cloud storage added to CVAT instances
• Monitor CVAT instances for suspicious activity
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record indicates that CVAT versions 1.6.0 through 2.64.0 are vulnerable to arbitrary file overwrites. An attacker with write access to a cloud storage added to a CVAT instance or ability to add new cloud storages can exploit this issue. The fix is in version 2.65.0. Evidence is limited to public CVE and NVD details. Defenders should verify CVAT instance configurations, cloud storage access controls, and monitor for suspicious activity.

Official resources