GCP-2026-011

Summary

A stored cross-site scripting flaw in the _genai/_evals_visualization module of Google's google-cloud-aiplatform Vertex AI Python SDK, tracked as CVE-2026-2472 and rated High, lets an unauthenticated remote attacker run arbitrary JavaScript in a victim's Jupyter or Colab environment. The attacker injects script escape sequences into model evaluation results or dataset JSON data. The issue affects versions prior to 1.131.0.

Mitigation

Update the google-cloud-aiplatform Python SDK to version 1.131.0 or later. The source states this version was released on 2025-12-16.

Related items

• MediumCVE-2026-111372: AI ChatBot for WooCommerce WoowBot plugin authorization bypass in RAG syncSame vendor · NVD/CVE Database
• HighCVE-2026-117560: ATXP Gemini CLI extension OS command injection in runAtxp() via MCP parametersSame vendor · NVD/CVE Database
• CriticalCVE-2026-90970: GitLab AI Gateway prompt template sandbox escape via crafted flow configurationSame vendor · NVD/CVE Database
• MediumCVE-2026-89278: GPTranslate WordPress plugin exposes plaintext API key to unauthenticated usersSame vendor · NVD/CVE Database
• CriticalCVE-2026-19407: Google Cloud Gemini Enterprise Agent Platform SDK for Python bucket squattingSame vendor · NVD/CVE Database