Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | Maximo AI Service | affected |
|
No data.
No data.
No data available yet.
Vendor Solution
IBM strongly recommends addressing the vulnerability now by upgrading Remediated Product(s)Version(s)Maximo AI Service9.1.19 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery Maximo AI Service9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7290833 |
|
Mon, 12 Oct 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation. | |
| Title | Maximo AI Service Code Injection | |
| First Time appeared |
Ibm
Ibm maximo Ai Service |
|
| Weaknesses | CWE-94 | |
| CPEs | cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm maximo Ai Service |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-10-12T21:43:33.003Z
Reserved: 2026-09-14T11:05:19.026Z
Link: CVE-2026-90920
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-12T22:17:05.683
Modified: 2026-10-12T22:17:05.683
Link: CVE-2026-90920
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-94
Improper Control of Generation of Code ('Code Injection')