---
id: CVE-2026-85183
title: >-
  Taipy configures its socket.io server with wildcard CORS origin and credential
  flag enabled, allowing any web page to establish credentialed WebSocket
  connections to victim applications
summary: >-
  Taipy configures its socket.io server with wildcard CORS origin and credential
  flag enabled, allowing any web page to establish credentialed WebSocket
  connections to victim applications. Attackers can open socket.io sessions from
  arbitra…
severity: critical
cvss: 9.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N'
cwe:
  - CWE-1385
published: '2026-09-03'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T15:53:23.707'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-85183'
references:
  - url: 'https://github.com/Avaiga/taipy'
    label: disclosure@vulncheck.com
  - url: 'https://github.com/Avaiga/taipy/blob/4.1.1/taipy/gui/server.py'
    label: disclosure@vulncheck.com
  - url: 'https://github.com/Avaiga/taipy/issues/2890'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/taipy-through-4.1.1-cross-site-websocket-hijacking-via-wildcard-socket-io-cors
    label: disclosure@vulncheck.com
  - url: 'https://github.com/Avaiga/taipy/issues/2890'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00153
epssPercentile: 0.04859
ingestedAt: '2026-09-10T16:57:28.701Z'
vendor: Avaiga
product: taipy
affected:
  - taipy <= 4.1.1
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-03T14:43:25.374412Z'
---

## Overview

Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to establish credentialed WebSocket connections to victim applications. Attackers can open socket.io sessions from arbitrary domains and invoke state variable modifications and action callbacks without CSRF protection.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.