CVE-2026-90920: IBM Maximo Ai Service

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

Affected products

• IBM Maximo Ai Service: version 9.1.0 only; version 9.2.0 only

Published 2026-10-12. Last modified 2026-10-13.