p PatchFirst

CVE-2026-2472

CVE-2026-2472 · Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.

CVSS 8.6 · High · EPSS 0.6% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • vertex ai sdk for python

    Versions
    • ≥ 1.98.0, < 1.131.0: Affected (custom)

    Update to 1.131.0

  • google-cloud-aiplatform PyPI

    Versions
    • 1.100.0
    • 1.101.0
    • 1.102.0
    • 1.103.0
    • 1.104.0
    • 1.105.0
    • 1.106.0
    • 1.107.0
    • 1.108.0
    • 1.109.0
    • 1.110.0
    • 1.111.0
    • 1.112.0
    • 1.113.0
    • 1.114.0
    • 1.115.0
    • 1.116.0
    • 1.117.0
    • 1.118.0
    • 1.119.0
    • 1.120.0
    • 1.121.0
    • 1.122.0
    • 1.123.0
    • 1.124.0
    • 1.125.0
    • 1.126.0
    • 1.126.1
    • 1.127.0
    • 1.128.0
    • 1.129.0
    • 1.130.0
    • 1.98.0
    • 1.99.0
    Affected ranges
    • ECOSYSTEM: ≥ 1.98.0, < 1.131.0

    Update to 1.131.0

Original sources

Check your server →