The vulnerability CVE-2026-2472 is a stored Cross-Site Scripting (CWE-79) issue in the _genai/_evals_visualization component of the Google Cloud Vertex AI SDK for Python. It allows an unauthenticated remote attacker to execute arbitrary JavaScript code in the context of a victim's Jupyter or Colab environment by injecting script escape sequences into model evaluation results or dataset JSON data. This affects versions starting from 1.98.0 up to but not including 1.131.0. The vulnerability has a CVSS 4.0 score of 8.6, indicating high severity. The affected product is a cloud service, and Google has applied mitigations server-side. No known exploits in the wild have been reported. Vendor advisories from Google and Red Hat provide additional context and remediation information.

Successful exploitation allows an unauthenticated attacker to execute arbitrary JavaScript in the victim's Jupyter or Colab environment, potentially leading to unauthorized actions or data exposure within that environment. The vulnerability impacts the confidentiality, integrity, and availability of the affected environment with high impact ratings. Since the attack vector is network-based with no privileges required, the risk is significant for users of the affected SDK versions.

Google manages remediation for this cloud-hosted service and has already applied mitigations to the affected products and services. Users should ensure they are using versions of the Vertex AI SDK for Python at or above 1.131.0 where the vulnerability is fixed. Refer to the official Google advisory at https://docs.cloud.google.com/support/bulletins#gcp-2026-011 for detailed guidance. No additional customer action is required if using the managed cloud service, but updating SDK versions is recommended where applicable.