id: PYSEC-2026-2499
published: "2026-07-13T14:36:37.160051Z"
modified: "2026-07-13T16:04:10.596030Z"
aliases:
- CVE-2026-2472
- GHSA-qv8j-hgpc-vrq8
summary: Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)
details: Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.
affected:
- package:
    name: google-cloud-aiplatform
    ecosystem: PyPI
    purl: pkg:pypi/google-cloud-aiplatform
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: 1.98.0
    - fixed: 1.131.0
  versions:
  - 1.100.0
  - 1.101.0
  - 1.102.0
  - 1.103.0
  - 1.104.0
  - 1.105.0
  - 1.106.0
  - 1.107.0
  - 1.108.0
  - 1.109.0
  - 1.110.0
  - 1.111.0
  - 1.112.0
  - 1.113.0
  - 1.114.0
  - 1.115.0
  - 1.116.0
  - 1.117.0
  - 1.118.0
  - 1.119.0
  - 1.120.0
  - 1.121.0
  - 1.122.0
  - 1.123.0
  - 1.124.0
  - 1.125.0
  - 1.126.0
  - 1.126.1
  - 1.127.0
  - 1.128.0
  - 1.129.0
  - 1.130.0
  - 1.98.0
  - 1.99.0
references:
- type: ADVISORY
  url: https://nvd.nist.gov/vuln/detail/CVE-2026-2472
- type: WEB
  url: https://github.com/googleapis/python-aiplatform/commit/8a00d43dbd24e95dbab6ea32c63ce0a5a1849480
- type: WEB
  url: "https://docs.cloud.google.com/support/bulletins#gcp-2026-011"
- type: WEB
  url: https://github.com/JoshuaProvoste/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud
- type: PACKAGE
  url: https://github.com/googleapis/python-aiplatform
- type: WEB
  url: https://github.com/googleapis/python-aiplatform/releases/tag/v1.131.0
- type: PACKAGE
  url: https://pypi.org/project/google-cloud-aiplatform
- type: ADVISORY
  url: https://github.com/advisories/GHSA-qv8j-hgpc-vrq8
severity:
- type: CVSS_V4
  score: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber