CVE-2026-73221 cvat-ai CVE debrief

Who should care

Defenders managing CVAT deployments, especially those with Worker role users, should assess exposure and prioritize updates to version 2.72.0. Operators of CVAT platforms, security teams, and vulnerability management teams should review the affected scope and plan for updates or mitigations. Security teams should also monitor for unusual annotation request activity and review compensating controls for exposed systems.

Why it matters

CVE-2026-73221 allows users with the Worker role in CVAT to access and cancel annotation requests outside their scope, requiring verification of exposure and updates to version 2.72.0.

• Verify exposure in CVAT deployments with Worker role users
• Assess the need for updates to version 2.72.0
• Monitor for unusual annotation request activity

Technical summary

The CVAT tool has a vulnerability in versions 2.17.0 to 2.72.0 where a user with the Worker role can use predictable task-based request IDs to view and cancel automatic annotation requests for tasks or jobs they cannot access. This issue allows users to access and cancel annotation requests outside their scope, requiring verification of exposure and updates to version 2.72.0. Affected CVAT deployments should be reviewed for exposure, and updates should be prioritized to mitigate this vulnerability. The vulnerability is fixed in version 2.72.0.

Defensive priority

Defenders should prioritize verifying exposure in CVAT deployments, especially those with Worker role users, and assess the need for updates to version 2.72.0.

Recommended defensive actions

• Verify CVAT version and assess exposure
• Update to version 2.72.0 if vulnerable
• Monitor for unusual annotation request activity
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and NVD entry provide details on the predictable task-based request ID vulnerability in CVAT versions 2.17.0 to 2.72.0, which allows users with the Worker role to view and cancel annotation requests they cannot access.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.