PatchTheCVECVE-2026-2108: A vulnerability was determined in jsbroks COCO Annotator up to 0.11.1
CVE-2026-2108 is a medium-severity flaw (CVSS 5.3) affecting coco annotator. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability was determined in jsbroks COCO Annotator up to 0.11.1. This impacts an unknown function of the file /api/info/long_task of the component Endpoint. This manipulation causes denial of service. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Why this priority
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.8% (top 44%) |
| CISA exploited list | No |
| Weakness | CWE-404 |
| Published | 2026-02-07 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-2108?
coco annotator: upgrade to newer than 0.11.1. Exact commands for each OS are on this page.
Is CVE-2026-2108 being exploited?
CVE-2026-2108 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-2108 affect?
CVE-2026-2108 affects coco annotator. Severity is medium (CVSS 5.3). A vulnerability was determined in jsbroks COCO Annotator up to 0.11.1. This impacts an unknown function of the file /api/info/long_task of the component Endpoint. This manipulation causes denial of service. The attack may be initiated remot
How urgent is CVE-2026-2108?
Priority 42/100. Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2026-2109 MEDIUM 5.4 UPGRADE A vulnerability was identified in jsbroks COCO Annotator up to 0.11.1
- CVE-2024-10141 LOW 3.7 DOWNGRADE A vulnerability, which was classified as problematic, was found in jsbroks COCO Annotator 0.11.1