HighVulnerability
GHSA-qv8j-hgpc-vrq8: Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)
- Identifiers
- CVE-2026-2472GHSA-qv8j-hgpc-vrq8
- Published
- Record updated
- Affected
- google-cloud-aiplatform >= 1.98.0, < 1.131.0
- Fixed in
- 1.131.0
- released December 16, 2025, 65 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.6%
Summary
Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of the Google Cloud Vertex AI SDK (google-cloud-aiplatform), versions 1.98.0 up to but not including 1.131.0, lets an unauthenticated remote attacker run arbitrary JavaScript in a victim's Jupyter or Colab environment. The attacker injects script escape sequences into model evaluation results or dataset JSON data.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- google-cloud-aiplatformPyPILLM dependency since 2020-11-09 · 21 tracked dependents
Related items
- MediumCVE-2026-111372: AI ChatBot for WooCommerce WoowBot plugin authorization bypass in RAG syncSame vendor · NVD/CVE Database
- HighCVE-2026-117560: ATXP Gemini CLI extension OS command injection in runAtxp() via MCP parametersSame vendor · NVD/CVE Database
- CriticalCVE-2026-90970: GitLab AI Gateway prompt template sandbox escape via crafted flow configurationSame vendor · NVD/CVE Database
- MediumCVE-2026-89278: GPTranslate WordPress plugin exposes plaintext API key to unauthenticated usersSame vendor · NVD/CVE Database
- CriticalCVE-2026-19407: Google Cloud Gemini Enterprise Agent Platform SDK for Python bucket squattingSame vendor · NVD/CVE Database