CyberRota
Back to database

CVE-2026-41512

CRITICAL · CVSS 9.9 EPSS 0.32% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-08 · Last synced: 2026-06-07

CyberRota Analysis

Uzaktan istismar edilebilir olabilir.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution
GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-41512
Severity
CRITICAL
CVSS
9.9
EPSS
0.32%
Java

Original NVD Description

ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in `BrowserAutomation::PlaywrightService`. This issue has been patched in version 1.4.1.