CVE-2026-90920
CriticalCVSS 9.8Summary
IBM Maximo AI Service 9.1.0 and 9.2.0 contains a vulnerability related to improper control of code generation. A remote attacker can exploit this to execute arbitrary code.
Risk Assessment
A remote attacker can gain the ability to execute arbitrary code, potentially leading to full system and data compromise.
Recommendation
Install patches provided by IBM for Maximo AI Service. Restrict network access to the service and apply the principle of least privilege.
Other vulnerabilities in IBM Maximo AI Service
See all- CVE-2026-90921High
IBM Maximo AI Service 9.1.0 and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.
- CVE-2026-90912High
IBM Maximo AI Service 9.1.0 and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
- CVE-2026-90911High
IBM Maximo AI Service 9.1.0 and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
- CVE-2026-78673High
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.
Original NVD description (English source)
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS