# CVE-2026-100174: AIL Framework stored XSS in tag selector component

Source: https://junglewise.ai/threats/cve-2026-100174-the-ail-framework-tag-selector-component-var-www-static-js-tags  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-25. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-100174 · Severity: info · Published 2026-09-25

The AIL Framework, an open-source intelligence analysis platform, contains a stored cross-site scripting vulnerability in its tag management feature. An authenticated user with tag creation permissions can inject malicious HTML/JavaScript into custom tag names. When other authenticated users view pages with those tags, the malicious script executes in their browsers, potentially allowing session hijacking, data theft, or account compromise.

Technologies: [Ail-Project AIL framework](https://junglewise.ai/threats/technologies/ail-framework). Vendors: [Ail-Project](https://junglewise.ai/threats/vendors/ail-project).

## Quick answers

**Is CVE-2026-100174 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-100174 being exploited in the wild.

**How severe is CVE-2026-100174?** Informational severity, published 25 September 2026.

**Which products and versions are affected?** Ail-Project AIL framework <patched version.

**Is there a fix for CVE-2026-100174?** A patch was published on 2026-09-25: Fix committed to GitHub (b2d0ed05f6cf79b2312a3f1f923d0d1a5d7a9edb) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-100174 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-100174?** Check whether you run Ail-Project AIL framework at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

Stored XSS in the tag selector component (var/www/static/js/tags.js) caused by improper handling of user-supplied tag names. The vulnerable code paths (_renderComboItems and tag rendering logic) pass tag display values directly to jQuery's html() method, which parses and executes embedded HTML/JavaScript. Exploitation requires an authenticated attacker with tag creation privileges and affects any authenticated user viewing the tag selector; the malicious payload persists in the system and executes without victim interaction.

## Affected products

- AIL Project AIL Framework <patched version

## Timeline

- 2026-09-25: disclosed
- 2026-09-25: patched: Fix committed to GitHub (b2d0ed05f6cf79b2312a3f1f923d0d1a5d7a9edb)

## References

- [https://github.com/ail-project/ail-framework/commit/b2d0ed05f6cf79b2312a3f1f923d0d1a5d7a9edb](https://github.com/ail-project/ail-framework/commit/b2d0ed05f6cf79b2312a3f1f923d0d1a5d7a9edb)

## Related threats

- [AIL Framework stored XSS in showDomain page](https://junglewise.ai/threats/cve-2026-100190-the-ail-framework-crawler-splash-domain-page-showdomain-html-is)
- [AIL Framework Onion module crawler task injection](https://junglewise.ai/threats/cve-2026-100187-the-onion-module-in-ail-framework-contained-a-performance)
- [AIL Framework insufficient authorization in crawler task API](https://junglewise.ai/threats/cve-2026-100177-the-ail-framework-crawler-task-creation-api-api-add-crawler-task)
- [AIL Framework stored XSS in username timeline tooltip](https://junglewise.ai/threats/cve-2026-100176-the-ail-framework-s-username-timeline-feature-is-vulnerable-to)
- [AIL Framework stored XSS in Jinja2 templates](https://junglewise.ai/threats/cve-2026-100172-the-ail-framework-ail-project-ail-framework-contains-a-stored)