CVE-2026-2472CWE-79

Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization

High · published February 20, 2026

CVSS v4.0
8.6
EPSS
1%
Percentile
48.4
In the wild
Unconfirmed
What it is

Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber
EPSS
0.00608 · 48.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-02-20T19:29Z
EPSS history
Timeline
  • 20 FEB 19:29Z
    Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization
    cvelistv5