Stored XSS in FiftyOne via Dataset Field Descriptions

Voxel51's FiftyOne platform contains a stored cross-site scripting (XSS) vulnerability, tracked as CVE-2026-80426. The vulnerability exists within the 'FieldLabelAndInfo' component, which renders dataset field descriptions using React's 'dangerouslySetInnerHTML' without prior sanitization or escaping. Because these descriptions are stored as part of the dataset schema, the payload persists across database entries and travels with exported or published datasets.

When a victim opens a malicious dataset, the XSS payload executes within the context of the FiftyOne application origin. This origin is shared with the unauthenticated FiftyOne server media route. An attacker can leverage this execution context to read local files on the server or interact with sensitive dataset and operator endpoints, potentially resulting in unauthorized data access or local file disclosure.

Attack Chain

1. Attacker crafts a malicious dataset with a crafted XSS payload injected into a field's description string.
2. The malicious dataset is exported or distributed to a victim.
3. The victim imports the malicious dataset into their instance of FiftyOne.
4. The victim navigates to the UI component that displays the malicious dataset's field information.
5. The 'FieldLabelAndInfo' component renders the description via 'dangerouslySetInnerHTML', triggering the malicious script.
6. The script executes within the FiftyOne origin and makes requests to the unauthenticated media route.
7. The script reads arbitrary local files or interacts with internal operator endpoints as the authenticated user.

Impact

Successful exploitation allows for the execution of arbitrary JavaScript within the FiftyOne browser context. This grants an attacker the ability to bypass existing security controls to access sensitive dataset information, trigger operator endpoints, and potentially read local files accessible to the FiftyOne server, impacting data integrity and confidentiality.

Recommendation

• Upgrade FiftyOne to a patched version that sanitizes field descriptions before rendering.
• Avoid importing or opening datasets from untrusted or unverified third-party sources until the patch is applied.
• Restrict network access to the FiftyOne server to trusted internal users to mitigate the impact of the unauthenticated media route.