Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-20 | 2 | Disclosure2 |
| 2026-02-27 | 2 | Exploit1PoC1 |
| 2026-02-28 | 1 | Disclosure1 |
| 2026-03-01 | 1 | Patch1 |
| 2026-03-04 | 1 | Exploit1 |
| 2026-03-23 | 1 | Exploit1 |
PoC/Exploit for CVE-2026-2472 – Unauthenticated Stored Cross-Site Scripting (XSS) in the Official Vertex AI SDK for Google Cloud https://github.com/JoshuaProvoste/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud #BugBounty #Hacking #AI #GoogleCloud #VertexAI
Post summary
A PoC and exploit for CVE-2026-2472, a stored XSS in the Vertex AI SDK, has been published on GitHub.
GitHub - JoshuaProvoste/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud: Technical PoC for CVE-2026-2472 (GCP-2026-011): Unauthenticated and Stored Cross-Site Scripting (XSS) in google-cloud-aiplatform _genai/_evals_visualization (Vertex AI Python SDK) https://github.com/JoshuaProvoste/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud
Post summary
The text announces a GitHub repository containing a technical PoC that demonstrates an unauthenticated stored XSS vulnerability in the Vertex AI Python SDK, providing code and technical details but no patch or evidence of active exploitation.
1️⃣ 0-click RCE Exploit for CVE-2024-10924 affecting over 4 million WordPress sites ⚙️ https://lnkd.in/dw__Mf3W 2️⃣ Unauthenticated Stored Cross-Site Scripting (XSS) for CVE-2026-2472 affecting the Google Cloud Vertex AI SDK ⚙️ https://lnkd.in/dR_2xKnD
Post summary
The post announces zero‑click RCE and unauthenticated XSS flaws with links that likely contain PoC code, yet it provides no evidence of active exploitation, patches, or false‑positive status.
@Huntio We covered this in depth — including the connection to CVE-2026-2472 (stored XSS in Google's Vertex AI SDK). Two different vectors, same target: Google Cloud AI infrastructure. Full breakdown + actionable remediation steps: http://vulntracker.io/blog/google-maps-api-key-gemini-credential/
Post summary
The post references CVE-2026-2472, a stored XSS in Vertex AI SDK, and directs readers to a blog with remediation steps for Google Cloud AI infrastructure.
This pairs with CVE-2026-2472 — stored XSS in Google's Vertex AI SDK affecting Jupyter/Colab environments. Rough week for Google Cloud AI security. Full CVE details + affected versions: http://vulntracker.io/cves/CVE-2026-2472 Audit your GCP API keys. Today.
Post summary
The post announces a stored XSS vulnerability (CVE-2026-2472) in Google's Vertex AI SDK that affects Jupyter/Colab environments, providing a link to full CVE details.
Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization CVE: CVE-2026-2472 PT-Identifier: PT-2026-21290 Vendor: Google Cloud Product: Vertex AI SDK for Python CVSS: 8.6 Credits: Din Asotić Description: Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-2472 • https://docs.cloud.google.com/support/bulletins#gcp-2026-011 Exploit: https://github.com/JoshuaProvoste/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud https://github.com/megafart1/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud/tree/main #dbugs_vuln
Post summary
A stored XSS flaw in Vertex AI SDK is disclosed with detailed impact and target versions, accompanied by GitHub exploit repositories but no indication of a patch or active exploitation.
CVE-2026-2472 Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but n… https://www.cve.org/CVERecord?id=CVE-2026-2472
Post summary
The text announces a newly disclosed stored XSS vulnerability (CVE‑2026‑2472) in Google Cloud Vertex AI SDK, specifying affected components and versions, but does not provide PoC, exploit, or mitigation details.
CVE-2026-2472: Poisoned Notebooks: Stored XSS in Google Vertex AI SDK A critical Stored Cross-Site Scripting (XSS) vulnerability in the Google Cloud Vertex AI Python SDK allows attackers to execute arbitrary JavaScript within a victim's Jupyter or Col... https://cvereports.com/reports/CVE-2026-2472
Post summary
The text announces a critical stored XSS vulnerability (CVE‑2026‑2472) in the Google Vertex AI Python SDK that enables attackers to run arbitrary JavaScript in Jupyter notebooks.