CVE-2026-41512

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-41512", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-20T18:18:50.681Z", "datePublished": "2026-05-08T13:52:56.263Z", "dateUpdated": "2026-05-08T21:27:16.514Z"}, "containers": {"cna": {"title": "Remote code execution via JavaScript injection in `BrowserAutomation::PlaywrightService`", "problemTypes": [{"descriptions": [{"cweId": "CWE-94", "lang": "en", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.9, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr"}, {"name": "https://github.com/0din-ai/ai-scanner/releases/tag/v1.4.1", "tags": ["x_refsource_MISC"], "url": "https://github.com/0din-ai/ai-scanner/releases/tag/v1.4.1"}], "affected": [{"vendor": "0din-ai", "product": "ai-scanner", "versions": [{"version": ">= 1.0.0, < 1.4.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-08T13:52:56.263Z"}, "descriptions": [{"lang": "en", "value": "ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in `BrowserAutomation::PlaywrightService`. This issue has been patched in version 1.4.1."}], "source": {"advisory": "GHSA-r27j-xxgx-f5vr", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-08T17:04:46.709991Z", "id": "CVE-2026-41512", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-08T21:27:16.514Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-41512", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-05-08T17:04:46.709991Z"}}}], "references": [{"url": "https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-08T17:05:07.753Z"}}], "cna": {"title": "Remote code execution via JavaScript injection in `BrowserAutomation::PlaywrightService`", "source": {"advisory": "GHSA-r27j-xxgx-f5vr", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "0din-ai", "product": "ai-scanner", "versions": [{"status": "affected", "version": ">= 1.0.0, < 1.4.1"}]}], "references": [{"url": "https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr", "name": "https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/0din-ai/ai-scanner/releases/tag/v1.4.1", "name": "https://github.com/0din-ai/ai-scanner/releases/tag/v1.4.1", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in `BrowserAutomation::PlaywrightService`. This issue has been patched in version 1.4.1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-08T13:52:56.263Z"}}}, "cveMetadata": {"cveId": "CVE-2026-41512", "state": "PUBLISHED", "dateUpdated": "2026-05-08T21:27:16.514Z", "dateReserved": "2026-04-20T18:18:50.681Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-05-08T13:52:56.263Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "ai-scanner", "vendor": "0din-ai", "versions": [{"status": "affected", "version": ">= 1.0.0, < 1.4.1"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:0din_scanner:*:*:*:*:*:*:*:*", "matchCriteriaId": "181C627F-1DB3-4C79-B6D4-3245A2663F2F", "versionEndExcluding": "1.4.1", "versionStartIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in `BrowserAutomation::PlaywrightService`. This issue has been patched in version 1.4.1."}, {"lang": "es", "value": "ai-scanner es un esc\u00e1ner de seguridad de modelos de IA construido sobre NVIDIA garak. Desde la versi\u00f3n 1.0.0 hasta antes de la versi\u00f3n 1.4.1, existe una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo mediante inyecci\u00f3n de JavaScript en \u2019BrowserAutomation::PlaywrightService\u2019. Este problema ha sido parcheado en la versi\u00f3n 1.4.1."}], "id": "CVE-2026-41512", "lastModified": "2026-10-26T19:10:00.163", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.9, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 6.0, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-41512", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-05-08T17:04:46.709991Z", "version": "2.0.3"}}]}, "published": "2026-05-08T14:16:34.433", "references": [{"source": "security-advisories@github.com", "tags": ["Patch", "Product"], "url": "https://github.com/0din-ai/ai-scanner/releases/tag/v1.4.1"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.0.0,1.4.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "ai-scanner", "source": "cna", "vendor": "0din-ai"}, "product": "ai-scanner", "vendor": "0din-ai"}], "created": "2026-05-08T18:30:06.358577+00:00", "updated": "2026-05-10T21:25:18.444348+00:00", "vendors": ["0din-ai", "0din-ai$PRODUCT$ai-scanner"]}