EUVD-2026-45263
GHSA-2p7x-xfj5-vm79
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Network-delivered XSS requiring victim interaction; impact limited to browser session confidentiality and integrity with no scope change or availability loss.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
1DescriptionCVE.org
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary script code due to improper neutralization of input during web page generation.
AnalysisAI
Cross-site scripting in IBM Engineering AI Hub versions 1.0.0, 1.1.0, and 1.2.0 enables remote attackers to inject and execute arbitrary script code within a victim's browser session through unsanitized input that is rendered during web page generation. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) confirms remote, unauthenticated exploitability contingent on victim interaction, consistent with reflected or stored XSS. No public exploit code or active exploitation has been identified at time of analysis; IBM has released a patch via its support portal.
Technical ContextAI
The vulnerability arises from insufficient neutralization of user-supplied input before its inclusion in dynamically generated HTML, a classic cross-site scripting pattern. Notably, the assigned CWE-78 (Improper Neutralization of Special Elements used in an OS Command) is inconsistent with the description, which explicitly describes 'arbitrary script code' execution during 'web page generation' - behavior firmly within CWE-79 (Improper Neutralization of Input During Web Page Generation / XSS). This CWE mismatch may be a metadata error in the CVE record and could affect downstream SIEM or vulnerability management tooling that relies on CWE classification. The affected product, IBM Engineering AI Hub, is an enterprise platform for AI-assisted engineering workflows. The CPE identifier cpe:2.3:a:ibm:engineering_ai_hub:*:*:*:*:*:*:*:* covers all versioned instances of the application tier. The CVSS UI:R metric confirms that successful exploitation requires the victim's browser to render attacker-controlled content.
RemediationAI
Apply the vendor-released patch documented in IBM Security Bulletin https://www.ibm.com/support/pages/node/7279964 - the precise fixed version must be confirmed directly from that advisory, as it is not stated in the available CVE data. As a compensating control prior to patching, restrict network access to the IBM Engineering AI Hub web interface to trusted internal network segments or VPN-enforced connections, which reduces attacker reachability given the AV:N vector; note this does not eliminate risk from insider threats or already-connected users. Deploying a Web Application Firewall with XSS detection rules targeting the application endpoint can block common payload patterns, but carries a risk of false positives on legitimate rich-text or code-based engineering inputs and is not a substitute for patching. Organizations should also review application logs for anomalous input patterns that may indicate prior exploitation attempts.
More in Engineering Ai Hub
View allStored/reflected cross-site scripting in IBM Engineering AI Hub 1.0.0 through 1.2.0 lets a remote unauthenticated attack
Sensitive information disclosure in IBM Engineering AI Hub 1.0.0 through 1.2.0 allows remote attackers to harvest sessio
IBM Engineering AI Hub versions 1.0.0, 1.1.0, and 1.2.0 expose an open redirect flaw (CWE-601) that enables remote attac
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today