Cyber Resilience

CVE-2026-55237

XSS

Published
18 June 2026
Modified
18 June 2026
CVSS Score v3.1 8.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
EPSS Score 0.0032 24th percentile
Risk Priority 61 floored blend · peak EPSS

Summary

CVE-2026-55237 is a high-severity Improper Neutralization of Alternate XSS Syntax (CWE-87) vulnerability. Its CVSS base score is 8.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Content Injection (T1659); ranked at the 24th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

This vulnerability is AI-related — categorised as LLM Application Platforms.

The strongest mitigations our analysis identified map to SA-11 (Developer Testing and Evaluation) and SI-10 (Information Input Validation) — see the control section below for these in your framework.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability Data

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions prior to 0.6.62 have a DOM-based Cross-Site Scripting (XSS) vulnerability in AutoGPT's signup page. The application improperly trusts a URL parameter (`next`), which is…

more

passed to `router.push`. An attacker can craft a malicious link that, when opened by an authenticated user, performs a client-side redirect and executes arbitrary JavaScript in the context of their browser. This could lead to credential theft, internal network pivoting, and unauthorized actions performed on behalf of the victim. Version 0.6.62 patches the issue.

CWE(s)

AI Security AnalysisAI

AI Category
LLM Application Platforms
Risk Domain
N/A
OWASP Top 10 for LLMs 2025
None mapped
Classification Reason
Matched keywords: artificial intelligence

Related Threats

MITRE ATT&CK Enterprise Techniques

T1659 Content Injection Initial Access
Adversaries may gain access and continuously communicate with victims by injecting malicious content into systems through online network traffic.
T1566 Phishing Initial Access
Adversaries may send phishing messages to gain access to victim systems.
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2026-33510Shared CWE-601, CWE-87
CVE-2026-33506Shared CWE-601, CWE-87
CVE-2026-25688Shared CWE-87
CVE-2026-26003Shared CWE-601
CVE-2025-59426Shared CWE-601
CVE-2026-45314Shared CWE-87
CVE-2025-6238Shared CWE-601
CVE-2024-11044Shared CWE-601
CVE-2024-5936Shared CWE-601
CVE-2025-52552Shared CWE-601

Affected Assets

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)
  • V3.7.2

Mitigating Controls (NIST 800-53 r5) AI

SA-11 requires developer testing and analysis that can discover improper neutralization of alternate script syntax after it has been coded.

SI-10 directly requires validation/sanitization of untrusted inputs, which structurally stops alternate XSS syntax from reaching the interpreter.

Information flow enforcement can restrict redirects to only approved/trusted destinations, stopping untrusted user-supplied URLs from being followed.

SA-8 mandates secure engineering principles such as input neutralization and output encoding that prevent introduction of this class of flaw.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly require proper input neutralization and output encoding to prevent alternate XSS syntax.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

prevents

Secure coding standards require proper neutralization of alternate script syntax, directly eliminating CWE-87.

finds

Security testing catches residual XSS but does not itself implement the neutralization controls.

mitigates

Preventing access to attacker-controlled or malicious sites stops users from being redirected to untrusted locations via open-redirect or phishing links.

prevents

Secure SDLC mandates input validation and output encoding that directly prevent alternate XSS syntax.

prevents

Application security requirements explicitly call for neutralization of untrusted input to block XSS variants.

prevents

Secure architecture principles reduce attack surface but do not prescribe specific encoding rules.

References