FiftyOne’s application server was configured to return an Access‑Control‑Allow‑Origin header of "*" without authentication checks. This wildcard CORS policy allowed any website loaded in a user’s browser to read responses from the local server, including files exposed through the /media endpoint. The flaw can be exploited to exfiltrate server‑side files by simply visiting a malicious page, leading to unauthorized disclosure of sensitive data. The CVSS score of 6.3 indicates a moderate severity vulnerability that can impact confidentiality.

The issue affected the Voxel51 FiftyOne platform, specifically the App/API server components in fiftyone/server/app.py and the /media route in fiftyone/server/routes/media.py. All releases prior to version 1.17.0 were vulnerable; the fix was applied in version 1.17.0 with the introduction of an allowed_origin configuration and the FIFTYONE_ALLOWED_ORIGINS environment variable, which restricts cross‑origin access to explicitly listed domains.

With a CVSS of 6.3, moderate severity, and no EPSS data available, the vulnerability remains a tangible risk to environments that run unpatched FiftyOne instances. Because the server is local and unauthenticated, a drive‑by attack can trigger the cross‑origin read without any user interaction beyond visiting a malicious site. The vulnerability is not listed in CISA KEV, suggesting no widespread exploitation has been documented, but the attack path is straightforward and could be leveraged by any adversary with web hosting capabilities.