CVE-2026-2472: Google Cloud Vertex AI SDK Vulnerable to Stored XSS Attack
Summary
CVE-2026-2472: Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS). Affects google-cloud-aiplatform versions >= 1.98.0, < 1.131.0. Fixed in 1.131.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Google Cloud Vertex AI SDK, specifically the google-cloud-aiplatform package, is a powerful tool for developers working with machine learning models and AI applications. It provides functionalities for model training, evaluation, and deployment. However, certain versions of this SDK are susceptible to a Stored Cross-Site Scripting (XSS) vulnerability, which can compromise the security of applications utilizing this package.
Vulnerability Detail
The vulnerability arises from the _genai/_evals_visualization component of the Google Cloud Vertex AI SDK in versions from 1.98.0 up to (but not including) 1.131.0. An unauthenticated remote attacker can exploit this vulnerability by injecting malicious JavaScript code into model evaluation results or dataset JSON data. When this data is rendered in a victim's Jupyter or Colab environment, the injected script executes, potentially leading to unauthorized actions or data theft.
How To Fix
Minimum fixed version
1.131.0
This is the first release that contains the fix.
pip install --upgrade "google-cloud-aiplatform==1.131.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the affected versions of the google-cloud-aiplatform package (1.98.0 to 1.130.9) until you can update to the patched version. Additionally, sanitize any user inputs that may be rendered in Jupyter or Colab environments to prevent potential XSS attacks.
Conclusion
The Google Cloud Vertex AI SDK has a critical vulnerability (CVE-2026-2472) that allows for Stored XSS attacks in specific versions. It is crucial to update to the patched version to safeguard your applications. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for google-cloud-aiplatform →
FAQ
Stored XSS is a type of security vulnerability where an attacker can inject malicious scripts into content that is stored on a server and later served to users.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor and alert for open-source vulnerabilities without requiring any installation.
If exploited, this vulnerability can allow attackers to execute arbitrary JavaScript in a victim's environment, leading to data theft, unauthorized actions, or other malicious activities.
Yes, the CVSS score for this vulnerability is 8.6, indicating a high severity level.
If you cannot update the package right away, ensure that you sanitize any inputs that may be rendered in Jupyter or Colab environments to mitigate the risk of XSS attacks.
Related vulnerabilities
Recent vulnerabilities recorded for google-cloud-aiplatform.
