Tools AI Risk Radar ai-incident-0214
Incident record
IBM fixes critical code injection in Maximo AI Service
- Severity
- Critical
- Status
- Patched
- Type
- Infra Vuln
- Target
- IBM Maximo AI Service 9.1.0 and 9.2.0
- Actor
- researcher
- CVE
- CVE-2026-90920
What happened
A remote code-injection vulnerability affects IBM’s Maximo AI Service. IBM rates it 9.8 Critical under CVSS 3.1.
IBM’s bulletin was published on 5 October; the CVE followed on 12 October. IBM identifies 9.1.19 and 9.2.3 as remediation versions for the respective branches, or the latest applicable catalogue. The bulletin supports the vulnerability and remediation; exploitation in the wild is unconfirmed.
Sources
- Original advisory or disclosurewww.ibm.com/support/pages/node/7290833
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-90920
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026