Skip to content
OpenAdvisories
High · 8.6 Public exploit CVE-2026-2472 EUVD-2026-7505GHSA-qv8j-hgpc-vrq8PYSEC-2026-2499

Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization

Published Feb 20, 2026 · Updated Jul 15, 2026 · Assigned by GoogleCloud

Vendor: Google Cloud Product: Vertex AI SDK for Python Package: google-cloud-aiplatform Ecosystem: PyPI

Description

Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.

Affected products

VendorProductAffectedFixed
Google Cloud Vertex AI SDK for Python 1.98.0 – < 1.131.0 1.131.0

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 2 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI google-cloud-aiplatform >= 1.98.0, < 1.131.0 1.131.0 GHSA-qv8j-hgpc-vrq8

Advisories 1

References