CVE-2026-85183

CVSS 9.3 (critical) · published 2026-09-03

Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to establish credentialed WebSocket connections to victim applications. Attackers can open socket.io sessions from arbitrary domains and invoke state variable modifications and action callbacks without CSRF protection.

Weakness: CWE-1385

Source: NVD CVE-2026-85183

References

• https://github.com/Avaiga/taipy
• https://github.com/Avaiga/taipy/blob/4.1.1/taipy/gui/server.py
• https://github.com/Avaiga/taipy/issues/2890
• https://www.vulncheck.com/advisories/taipy-through-4.1.1-cross-site-websocket-hijacking-via-wildcard-socket-io-cors
• https://github.com/Avaiga/taipy/issues/2890

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.