CVE-2024-40442: Doccano Auto Labeling Pipeline
High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.
An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request.
Affected products
Published 2024-09-23. Last modified 2026-06-17.