A vulnerability has been found in cvat up to 2.54.x and classified as problematic. The impacted element is an unknown function. Performing a manipulation results in privilege defined with unsafe actions.
This vulnerability is identified as CVE-2026-23526. The attack can be initiated remotely. There is not any exploit available.
The affected component should be upgraded.
