CVE-2026-41512: Remote code execution via JavaScript injection in `BrowserAutomation::PlaywrightService`

Severity: critical (CVSS 9.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-05-08 · updated 2026-10-26
Weakness: CWE-94

Description

ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in `BrowserAutomation::PlaywrightService`. This issue has been patched in version 1.4.1.

Affected products

0din-ai ai-scanner: from 1.0.0 before 1.4.1 — fixed in 1.4.1

How to fix

Upgrade to a fixed version: 0din-ai ai-scanner 1.4.1. Check the vendor advisory for mitigations.

References

https://github.com/0din-ai/ai-scanner/releases/tag/v1.4.1
https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr
https://github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vr

Get alerted when CVE-2026-41512 or the next vulnerability affects your stack