What’s Vulnerable › Vulnerabilities

CVE-2026-2472: Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-20 · updated 2026-07-15
• Weakness: CWE-79

Description

Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.

Affected products

• Google Cloud Vertex AI SDK for Python: from 1.98.0 before 1.131.0 — fixed in 1.131.0

How to fix

Upgrade to a fixed version: Google Cloud Vertex AI SDK for Python 1.131.0. Check the vendor advisory for mitigations.

References

• https://docs.cloud.google.com/support/bulletins#gcp-2026-011
• https://github.com/JoshuaProvoste/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud
• https://access.redhat.com/errata/RHSA-2026:10184
• https://access.redhat.com/security/cve/CVE-2026-2472
• https://bugzilla.redhat.com/show_bug.cgi?id=2441472
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2472.json

Get alerted when CVE-2026-2472 or the next vulnerability affects your stack