XSS in Unstructured-Io Unstructured
CVE-2026-104250
The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to 0.24.1, partition_html(html_parser_version="v2") and the VLM partitioner can preserve untrusted document tags, attributes, text, and link targets in metadata.text_as_html, while elements_to_html() emits the result as an HTML document. The to_html() path in unstructured/documents/ontology.py does not escape output or reject unsafe URL schemes, allowing event-handler attributes, attribute breakout markup, and javascript: links to survive parsing. When the generated HTML or text_as_html is rendered in a browser, attacker-controlled script can execute in the viewer's origin, including in document-ingestion workflows where a privileged reviewer opens submitted content. This issue is fixed in version 0.24.1.
Vulnerability class: XSS (Cross-Site Scripting)
Published .
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Unstructured-Io Unstructured — versions < 0.24.1
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-104250?
- CVE-2026-104250 is a medium-severity vulnerability in Unstructured-Io Unstructured, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-10-13.
- How severe is CVE-2026-104250?
- Medium severity. CVSS v3 base score is 6.1 out of 10.