CVE-2026-82834: A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto

A security flaw was found in Doccano (an open-source tool for labeling data used in machine learning projects) version 1.8.5 and earlier that allows attackers to bypass access controls (protections that restrict who can do what) through the bulk-delete endpoint. The flaw can be exploited remotely (from anywhere over the internet), the exploit code has been publicly released, and the vendor has not responded to early notifications about the problem.