An unsanitized manipulation of the argument template within Argilla’s Sandbox.vue component enables the injection of arbitrary script code that executes in the victim’s browser when the crafted payload is rendered. The description confirms that remote exploitation of the attack is possible; the exact method is not specified. The implications of the XSS flaw include potential compromise of confidentiality, integrity, and availability, although the advisory does not detail specific post‑exploitation effects. It is inferred that typical XSS outcomes—such as credential theft, UI defacement, or redirection—could occur, but this inference is not confirmed by the description.

Argilla products released up to and including version 2.8.0 are affected. The issue originates from the argilla-frontend/components/features/annotation/container/fields/sandbox/Sandbox.vue component in the Argilla codebase.

The CVSS score of 4.8 indicates a medium risk level, and the EPSS score is currently not available. The vulnerability is not listed in the CISA KEV catalog, but remote exploitation is reported and the exploit is publicly disclosed. The description does not specify whether authentication or special privileges are required; it only states that remote exploitation is possible. The lack of a vendor release at this time increases the urgency to monitor for exploitation and consider manual mitigations.