CVE-2026-78673: Maximo AI Service Improper Input Validation
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.
Other sources
Maximo AI Service could allow a remote attacker to cause a denial of service due to improper input validation.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Maximo AI Serviceto a version that resolves this vulnerability.Fixed in 9.1.19 - Upgrade
Upgrade
Maximo AI Serviceto a version that resolves this vulnerability.Fixed in 9.2.3
Event History
Frequently Asked Questions
Which deployments are affected?
IBM Maximo AI Service versions 9.1.0 and 9.2.0 are identified as affected.
Does exploitation require authentication or user interaction?
No. The vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction.
What is the likely impact of exploitation?
A remote attacker could cause a denial of service. The provided impact metrics indicate availability impact only, with no stated confidentiality or integrity impact.