Arbitrary Code Execution Vulnerability in IBM Maximo AI Service
CVE-2026-90920

9.8CRITICAL

Key Information:

Vendor

IBM
Status
Maximo Ai Service
Vendor
CVE Published:
12 October 2026

What is CVE-2026-90920?

IBM Maximo AI Service versions 9.1.0 and 9.2.0 are susceptible to vulnerabilities that could enable remote attackers to execute arbitrary code. This arises from an improper management of code generation processes within the software, potentially allowing unauthorized access and execution of malicious code. It's crucial for users to review their configurations and apply any available patches to mitigate these risks.

Affected Version(s)

Maximo AI Service 9.1.0

Maximo AI Service 9.2.0

References

https://www.ibm.com/support/pages/node/7290833
vendor-advisorypatch

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.