Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-90920

Maximo AI Service Code Injection

Description

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Maximo AI Service

  • 9.1.0affected
  • 9.2.0affected

References