Information disclosure in IBM Engineering AI Hub in (CVE-2026-15322)

CVE-2026-15322 is an information disclosure vulnerability in IBM Engineering AI Hub in which session tokens are exposed in URLs (CWE-598: Use of HTTP Request With Sensitive Query String). A remote, unauthenticated attacker could exploit this to obtain sensitive session token information; the vulnerability carries a CVSS 3.1 base score of 7.5 (High) with complete confidentiality impact. Affected versions: - 1.0.0 - 1.1.0 - 1.2.0 We recommend updating to: 1.3.0. CVSS 7.5 · our assessment: this_week Vendor advisory: https://www.ibm.com/support/pages/node/7279964 Details: https://vuln.today/cve/CVE-2026-15322