The vulnerability originates from Argilla’s handling of the text argument in the TextField.vue component. By providing crafted content, an attacker can inject arbitrary HTML or script code that is then rendered in the browser, leading to classic XSS. Because the flaw is triggered by manipulating data passed to the front‑end component, it can be triggered over the network, allowing a remote attacker to exploit it.

Argilla deployments running any version up to 2.8.0 are affected. The flaw resides in argilla-frontend/components/features/annotation/container/fields/text-field/TextField.vue. All installations using those versions, regardless of deployment environment, are potentially vulnerable.

The CVSS score of 4.8 indicates moderate severity, and as of this assessment the EPSS score is unavailable. The vulnerability is not listed in CISA KEV, but the public proof of concept demonstrates that exploitation is feasible and the attack can be performed remotely. Organizations should assess whether they host or expose the affected component to untrusted content before deciding on mitigation.