{"id":"CVE-2026-117494","kind":"vulnerability","aliases":["CVE-2026-117494"],"related":[],"title":"AI sessions API: SVG uploads run injected script in the assistant window","description":"Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:image/svg+xml;base64. Script tags embedded in the SVG are processed when the content is rendered in the assistant window, allowing JavaScript to be executed and the displayed content to be altered.","summary":"Stored/reflected XSS in Sisense Cloud BI Platform: SVG images sent to /api/v2/ai/sessions as data:image/svg+xml;base64 keep their script tags, and the script runs when the assistant window renders them. CVSS 4.0 8.3 (PR:L, UI:A): needs a logged-in user and a victim interaction.","severity":"high","cvss":8.3,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Cloud BI Platform","fixed":[],"affected":"all versions up to 2026-10-27 (SaaS, no version number published)","ecosystem":"vendor"}],"ecosystems":[],"tags":["ai-assistant","ai-tooling","auth-required","cloud-bi","saas","sisense","web-ui","xss"],"not_affected_if":["ai-assistant-disabled","self-hosted-without-sisense"],"how_to_check":"Sisense Cloud is a SaaS service, so there is nothing to scan for on your side. Check whether your organization uses Sisense Cloud BI with the AI assistant enabled. Ask Sisense support for the remediation status of CVE-2026-117494. No version is published.","fix":"unknown: INCIBE says no solution has been reported yet and the NVD record lists no fixed version. Sisense, as the SaaS operator, would have to patch. Watch the Sisense security page and the INCIBE notice.","status":"open","published_at":"2026-10-27T10:16:54+00:00","first_seen_at":"2026-10-27T10:31:02+00:00","triaged_at":"2026-10-27T10:31:54+00:00","updated_at":"2026-10-27T10:32:41+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-10-27T10:31:54Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"AI sessions API: SVG uploads run injected script in the assistant window","impact":"medium","summary":"The /api/v2/ai/sessions endpoint accepts SVG images submitted as base64 data URIs and does not strip script tags. When the content renders in the assistant window, embedded JavaScript runs and can alter what the user sees.","category":"ai-tooling","nicknames":[],"who_cares":["ai-assistant","web-ui"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker script runs in the victim's browser session and alters displayed content.","analyst_note":"Identify the affected product and vendor, the fixed version, and whether the endpoint requires authentication, from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-117494.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000522,"input_tokens":3335,"output_tokens":378,"severity_before":"high"},"analyst_status":"done","analyst_note":"Identify the affected product and vendor, the fixed version, and whether the endpoint requires authentication, from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-117494.","search":"'-117494':15A,18A '-2026':14A,17A '/api/v2/ai/sessions':51B,102C '4.0':72B '8.3':73B 'ai':1A,23B,26B 'ai-assist':22B 'ai-tool':25B 'allow':128C 'alter':139C 'api':3A,103C 'assist':11A,24B,67B,126C 'auth':29B 'auth-requir':28B 'base64':56B,110C 'bi':20A,33B,45B 'cloud':19A,32B,44B 'cloud-bi':31B 'content':121C,136C 'cross':89C 'cross-sit':88C 'cve':13A,16A 'cvss':71B 'data':53B,107C 'display':135C 'embed':113C 'execut':132C 'format':106C 'imag':48B,98C 'image/svg':54B,108C 'inject':7A 'interact':87B 'javascript':129C 'keep':57B 'l':75B 'log':81B 'logged-in':80B 'need':78B 'platform':21A,46B 'pr':74B 'process':95C,118C 'render':69B,123C 'requir':30B 'run':6A,64B 'saa':34B 'script':8A,59B,63B,91C,111C 'sent':49B 'session':2A 'sisens':35B,43B 'site':90C 'stored/reflected':40B 'submit':99C 'svg':4A,47B,97C,116C 'tag':60B,112C 'tool':27B 'ui':38B,76B 'upload':5A 'user':83B 'victim':86B 'web':37B 'web-ui':36B 'window':12A,68B,127C 'xml':55B,109C 'xss':39B,41B,92C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T10:16:54+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cve-coordination@incibe.es","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117494","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117494","severity":null,"published_at":"2026-10-27T10:16:54+00:00","modified_at":"2026-10-27T10:16:54+00:00","first_seen_at":"2026-10-27T10:31:02+00:00","fetched_at":"2026-10-27T10:31:02+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-117494:864","url":null,"severity":null,"published_at":"2026-10-27T10:32:41+00:00","modified_at":"2026-10-27T10:32:41+00:00","first_seen_at":"2026-10-27T10:32:41+00:00","fetched_at":"2026-10-27T10:32:41+00:00","note":"Sisense Cloud BI Platform (SaaS), per INCIBE-CERT INCIBE-2026-794 (27/10/2026) and NVD record; no fix or vendor advisory published yet; not exploited per INCIBE; no PoC found. Vendor's own page not found, so nothing marked verified. Sibling CVE-2026-117493 (BloX widgets XSS) from same notice."}],"documents":[{"id":5997,"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sisenses-cloud-bi-platform","title":"INCIBE-CERT: Multiple vulnerabilities in Sisense's Cloud BI Platform (INCIBE-2026-794)","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}