CVE-2026-90920

Summary

IBM Maximo AI Service allows remote attackers to execute arbitrary code due to improper code generation controls, potentially leading to full system compromise.

Exploitability

Exploitation appears straightforward for remote attackers with no authentication required, leveraging the improper code generation controls to inject and execute malicious code.

Blast radius

If exploited, this vulnerability could allow attackers to gain complete control over the Maximo AI Service environment, potentially affecting enterprise asset management workflows and data integrity.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Maximo AI Service 9.2.1 or later to address this arbitrary code execution vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.