Exploitation Summary
EIP tracks 4 public exploits for CVE-2026-2472. PoCs published by XiaomingX, XZ1r0, megafart1.
AI-analyzed exploit summary The repository contains a functional PoC for CVE-2026-2472, demonstrating a stored XSS vulnerability in Google Cloud Vertex AI SDK's _evals_visualization.py. The exploit injects a malicious script payload into JSON data, which is then embedded into an HTML script context without proper escaping.
Description
Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.
Exploits (4)
The repository contains a functional PoC for CVE-2026-2472, demonstrating a stored XSS vulnerability in Google Cloud Vertex AI SDK's _evals_visualization.py. The exploit injects a malicious script payload into JSON data, which is then embedded into an HTML script context without proper escaping.
This repository contains a functional proof-of-concept for CVE-2026-2472, demonstrating a stored XSS vulnerability in the Google Cloud Vertex AI SDK's _evals_visualization.py component. The exploit leverages improper HTML script-context escaping to inject arbitrary JavaScript into rendered Jupyter/Colab environments.
The repository contains a functional proof-of-concept for CVE-2026-2472, demonstrating an XSS vulnerability in the Vertex AI Python SDK from Google Cloud Platform. The exploit leverages the `_get_evaluation_html` function to inject malicious scripts into Jupyter or Colab notebook sessions.
This repository contains a functional proof-of-concept for CVE-2026-2472, demonstrating a stored XSS vulnerability in Google Cloud Vertex AI SDK's _evals_visualization.py. The exploit injects a malicious script payload into JSON data, which is then embedded into an HTML script context without proper escaping, leading to arbitrary JavaScript execution.
References (2)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber