CVAT remote code execution via tracker Nuclio functions (CVE-2025-23045)
CVAT versions 1.1.0 through 2.25.0 are vulnerable to remote code execution via unsafe deserialization in tracker-type Nuclio functions. An authenticated user can exploit this to run arbitrary code in the function container. The vulnerability was patched in version 2.26.0.
What happened
CVAT versions 1.1.0 through 2.25.0 contain a remote code execution vulnerability in tracker-type Nuclio serverless functions, specifically the TransT and SiamMask functions from the CVAT Git repository. Deployments with custom tracker functions using unsafe serialization libraries like pickle or jsonpickle are also potentially vulnerable.
An attacker with an account on an affected CVAT instance can run arbitrary code in the context of the Nuclio function container by exploiting unsafe deserialization of tracker state. The vulnerability was patched in version 2.26.0.
Reported impact
An authenticated attacker can execute arbitrary code within the Nuclio function container, potentially compromising the integrity and confidentiality of the deployed functions and any data they process.
Governance controls
CVAT released a patch in version 2.26.0 that protects tracker functions against deserializing untrusted input. The fix does not require redeployment of Nuclio functions after upgrading CVAT.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.