Cvat Computer Vision Annotation Tool — known CVE vulnerabilities

Every CVE whose affected-product data names Cvat Computer Vision Annotation Tool, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2025-23045 — CVSS 9.8 (critical): Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with an account…
• CVE-2021-45046 — CVSS 9.0 (critical) — actively exploited: It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could…
• CVE-2026-23526 — CVSS 8.8 (high): CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.0.0 through 2.54.0, users that have…
• CVE-2022-31188 — CVSS 8.6 (high): CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to…
• CVE-2024-37306 — CVSS 7.1 (high): Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. Starting in version 2.2.0 and…
• CVE-2024-37164 — CVSS 7.1 (high): Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. CVAT allows users to supply…
• CVE-2025-49135 — CVSS 6.5 (medium): CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.2.0 through 2.39.0 have no validation…
• CVE-2024-45393 — CVSS 6.4 (medium): Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with a CVAT…
• CVE-2024-47063 — CVSS 6.1 (medium): Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. If a malicious CVAT user with…
• CVE-2024-47064 — CVSS 6.1 (medium): Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. If an attacker can trick a…
• CVE-2024-47172 — CVSS 5.4 (medium): Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with a CVAT…
• CVE-2026-23516 — CVSS 5.4 (medium): CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.2.0 through 2.54.0, an attacker is…
• CVE-2025-54573 — CVSS 4.3 (medium): CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.1.0 through 2.41.0, email…
• CVE-2025-68430 — CVSS 4.3 (medium): CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.8.1 through 2.52.0, an attacker with…
• CVE-2025-48381 — CVSS 4.3 (medium): Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. In versions starting from…