CVE-2026-73219

CVAT vulnerability CVE-2026-73219 affects versions 2.17.0 through 2.72.0. A user with write access can submit a batch automatic annotation request to RequestViewSet.create using inconsistent task and job IDs. The task ID determines the single active request slot, which can block automatic annotat...