—

PYSEC-2026-2499

Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)

Quick fix

PYSEC-2026-2499 — google-cloud-aiplatform: upgrade to the fixed version with the command below.

pip install --upgrade 'google-cloud-aiplatform>=1.131.0'

Details

Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/google-cloud-aiplatform

Introduced in: 1.98.0Fixed in: 1.131.0

Fixpip install --upgrade 'google-cloud-aiplatform>=1.131.0'

References

https://nvd.nist.gov/vuln/detail/CVE-2026-2472[ADVISORY]
https://github.com/googleapis/python-aiplatform/commit/8a00d43dbd24e95dbab6ea32c63ce0a5a1849480[WEB]
https://docs.cloud.google.com/support/bulletins#gcp-2026-011[WEB]
https://github.com/JoshuaProvoste/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud[WEB]
https://github.com/googleapis/python-aiplatform[PACKAGE]
https://github.com/googleapis/python-aiplatform/releases/tag/v1.131.0[WEB]
https://pypi.org/project/google-cloud-aiplatform[PACKAGE]
https://github.com/advisories/GHSA-qv8j-hgpc-vrq8[ADVISORY]