CVE-2026-85183criticalCWE-1385

CVE-2026-85183: critical vulnerability in Avaiga taipy

Taipy through 4.1.1 Cross-Site WebSocket Hijacking via Wildcard socket.io CORS

Published · Updated

Follow this CVE+ Monitor taipy

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.2%
Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to establish credentialed WebSocket connections to victim applications. Attackers can open socket.io sessions from arbitrary domains and invoke state variable modifications and action callbacks without CSRF protection.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
Affected products
Avaiga · taipy
Related CVEs — Avaiga taipy

In the same product, most dangerous first.

CVE-2026-48544HIGHTaipy 4.1.1 Path Traversal via ElementLibrary.get_resource()EPSS 0.5%CVE-2024-47833MEDIUMSession Cookie without Secure and HTTPOnly flags in taipyEPSS 0.3%