Description
Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Google Cloud Vertex AI SDK for Python
Default version status: unaffected
1.98.0 to < 1.131.0affected
References
- https://docs.cloud.google.com/support/bulletins#gcp-2026-011 ↗
- https://github.com/JoshuaProvoste/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud ↗
- https://access.redhat.com/security/cve/CVE-2026-2472 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2441472 ↗
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2472.json ↗
- https://access.redhat.com/errata/RHSA-2026:10184 ↗