megafart1/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

PoC

Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.

view exploit source poc_in_githubauthor megafart1published 2026-03-10catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-2472US	—	0.61% (49th)	Exploit	2026-02-20
Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.