CVE-2024-40441: Doccano Auto Labeling Pipeline
Medium severity, CVSS 6.6. EPSS: 0.7% chance of exploitation in the next 30 days.
An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the model_attribs parameter.
Affected products
Published 2024-09-23. Last modified 2026-06-17.