Critical · 9.8 CVE-2026-90920 EUVD-2026-97973GHSA-9m3p-9mhg-hf3c

Maximo AI Service Code Injection

Published Oct 12, 2026 · Updated Oct 13, 2026 · Assigned by ibm

Description

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

Vendor	Product	Affected	Fixed
IBM	Maximo AI Service	9.1.0, 9.2.0	—