Vulnerability Description
Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to establish credentialed WebSocket connections to victim applications. Attackers can open socket.io sessions from arbitrary domains and invoke state variable modifications and action callbacks without CSRF protection.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/Avaiga/taipy
- https://github.com/Avaiga/taipy/blob/4.1.1/taipy/gui/server.py
- https://github.com/Avaiga/taipy/issues/2890
- https://www.vulncheck.com/advisories/taipy-through-4.1.1-cross-site-websocket-hi
- https://github.com/Avaiga/taipy/issues/2890
FAQ
What is CVE-2026-85183?
CVE-2026-85183 is a vulnerability with a CVSS score of 9.3 (CRITICAL). Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to establish credentialed WebSocket connections to victim applications. Attackers can...
How severe is CVE-2026-85183?
CVE-2026-85183 has been rated CRITICAL with a CVSS base score of 9.3/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-85183?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.