CVE-2026-116554 — Argilla Settings SettingsInfo.vue Dataset.from_disk cross-site scripting

Argilla up to version 2.8.0 contains a flaw where manipulating the Name argument of Dataset.from_disk may lead to cross-site scripting. The attack may be launched remotely, and an exploit has been published and may be used.