CVE-2026-90912: Maximo AI Service Denial of Service
Published Oct 12, 2026
·Updated
IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
Affected Software
1 affected component
IBM Maximo AI Service=9.1.0, =9.2.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Maximo AI Serviceto a version that resolves this vulnerability.Fixed in 9.1.19 - Upgrade
Upgrade
IBM Maximo AI Serviceto a version that resolves this vulnerability.Fixed in 9.2.3
Event History
Oct 12, 2026
CVE Published
via MITRE·09:43 PM
Data Sourced
via MITRE·09:43 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
A remote attacker can exploit it without authentication or user interaction. The listed attack vector is network-based with low attack complexity.
2
What is the impact if exploitation succeeds?
Successful exploitation can cause a denial of service. The supplied metrics indicate availability impact only, with no stated confidentiality or integrity impact.
3
Which deployments are identified as affected?
IBM Maximo AI Service 9.1.0 and 9.2.0 SaaS are identified as affected.