VulnSocial

CVE-2026-7681Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an unknown functionality of the file backend/webserver/api/datasets.py of the component Dataset API. The manipulation of the argument DatasetId leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-285CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 4 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 2 classified signals
  • 4 total mentions across 1 day

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-05-03: 4Technical Details · 2026-05-03: 205-03
Signal classification2 categories
Disclosure
250.0%
General
250.0%
Referenced assets4 URLs
Full discourse4 posts
  • White Rabbitx 🏴‍☠️@TheRabbitPy
    Disclosure

    🤖 AI Platform Alert: Langflow-ai (up to 1.8.4) vulnerable to Command Injection (CVE-2026-7687) via the Full Builtins Module. Monitor CVE-2026-7681 in COCO Annotator for Auth Bypass. Source: https://vuldb.com/vuln/360857

    Post summary

    Alert announcing a command‑injection flaw (CVE‑2026‑7687) in Langflow‑ai up to version 1.8.4 via the Full Builtins Module, with reference to another potential Auth Bypass CVE. No PoC, exploit, or patch details are provided.

    1000057
    1.3K followersView on X
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-7681 A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an unknown functionality of the file backend/webser… https://www.cve.org/CVERecord?id=CVE-2026-7681 ----- Traducción: CVE-2026-7681 Se … http://infoflow.cloud`

    Post summary

    The post reports the existence of CVE-2026-7681 in jsbroks COCO Annotator (up to v0.11.1) but provides no technical, exploit, or mitigation details.

    0000034
    75 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-7681 A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an unknown functionality of the file backend/webser… https://www.cve.org/CVERecord?id=CVE-2026-7681

    Post summary

    The text merely announces the detection of CVE-2026-7681 in jsbroks COCO Annotator up to v0.11.1, without providing technical details, exploit information, or mitigation guidance.

    00000260
    57.4K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7681 Authorization Bypass in jsbroks COCO Annotator Up to 0.11.1 Dataset API https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7681

    Post summary

    A brief notice identifies an Authorization Bypass vulnerability (CVE-2026-7681) in jsbroks COCO Annotator up to version 0.11.1, but offers no exploit, mitigation, or active exploitation details.

    0000046
    4.0K followersView on X

Explore more

Back to dashboard