{"id":"CVE-2026-120497","kind":"vulnerability","aliases":["CVE-2026-120497"],"related":[],"title":"AWS AI-DLC aidlc-traceability CLI: stored XSS in HTML traceability reports","description":"CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows\n\n### CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows\n\nBulletin ID: 2026-163-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/02/2026 11:00 AM PST\n\nDescription:\n\naidlc-traceability is an open source command-line tool, formerly published in the awslabs/aidlc-workflows repository, that generates traceability-matrix reports from a project's AI-DLC artifact files. We identified CVE-2026-120497, where stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI could allow an actor who can modify a project's AI-DLC artifact files to execute arbitrary script in the browser of a user who opens a generated HTML traceability report via crafted artifact titles or descriptions.\n\nImpacted versions: >=0.1.0 AND <commit 96cf0ea (fixed 2026-07-03)\n\nResolution:\n\nThis issue has been addressed in aidlc-traceability at commit 96cf0ea (2026-07-03). The CLI was subsequently removed from the awslabs/aidlc-workflows repository on 2026-07-16 and is no longer maintained there; an agent-native re-implementation is maintained separately at aws-samples/sample-aidlc-traceability. We recommend removing any local copy of the aidlc-traceability CLI obtained before 2026-07-03, or updating it to commit 96cf0ea or later, and ensuring any forked or derivative code incorporates the fix.\n\nWorkarounds:\n\nDo not open HTML reports generated by an unpatched copy of the tool from untrusted projects. Use the Markdown report output instead of HTML, or regenerate reports only from artifact files you control, until the local copy is updated or removed.\n\nReferences:\n\n- CVE-2026-120497\n- GHSA-gjmq-52p3-7fh2\n\nAcknowledgement:\n\nWe would like to thank Vignesh Kumar for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","summary":"The aidlc-traceability CLI in AWS AI-DLC Workflows does not escape artifact titles and descriptions when it writes HTML traceability reports. An attacker who can edit a project's AI-DLC artifact files can run script in the browser of anyone who opens a generated report.","severity":"medium","cvss":5.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-dlc-workflows","ai-tooling","aidlc-traceability","aws","aws-ai-dlc","lab-disclosure"],"not_affected_if":["artifacts-not-shared","no-html-reports","updated-cli"],"how_to_check":"- Look for a local copy of the aidlc-traceability CLI and check whether it was obtained before 2026-07-03.\n- Check whether the copy includes commit `96cf0ea` or later.","fix":"- Update the aidlc-traceability CLI to commit `96cf0ea` or later.\n- The CLI was removed from the repository on 2026-07-16; remove any local copy obtained before 2026-07-03.","status":"open","published_at":"2026-11-02T19:18:04+00:00","first_seen_at":"2026-11-02T19:24:40+00:00","triaged_at":"2026-11-02T19:26:55+00:00","updated_at":"2026-11-02T19:43:52+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-11-02T19:26:55Z","model":"claude-haiku-5-5","output":{"fix":"- Update the aidlc-traceability CLI to commit `96cf0ea` or later.\n- The CLI was removed from the repository on 2026-07-16; remove any local copy obtained before 2026-07-03.","reach":"local","title":"AWS AI-DLC aidlc-traceability CLI: stored XSS in HTML traceability reports","impact":"medium","summary":"The aidlc-traceability CLI in AWS AI-DLC Workflows does not escape artifact titles and descriptions when it writes HTML traceability reports. An attacker who can edit a project's AI-DLC artifact files can run script in the browser of anyone who opens a generated report.","audience":"developers","category":"ai-tooling","nicknames":[],"who_cares":["aws-ai-dlc","aidlc-traceability","ai-dlc-workflows"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"script runs in a viewer's browser when they open a report","analyst_note":"","how_to_check":"- Look for a local copy of the aidlc-traceability CLI and check whether it was obtained before 2026-07-03.\n- Check whether the copy includes commit `96cf0ea` or later.\n- unknown for any other check, as the sources do not say.","plain_action":"","needs_analyst":false,"not_affected_if":["no-html-reports","updated-cli","artifacts-not-shared"],"who_is_affected":"Teams that generate HTML traceability reports with the aidlc-traceability CLI from AWS AI-DLC Workflows before 2026-07-03 are exposed, mainly where artifact files can be edited by others. Anyone who opens a generated report in a browser can be hit. Teams that never used the CLI or already have a newer copy can skip it.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"unknown"},"cost_usd":0.000751,"input_tokens":4271,"output_tokens":648,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-03':257C,273C,324C '-07':256C,272C,285C,323C '-120497':17A,20A,91C,114C,191C,388C '-16':286C '-163':138C '-2026':16A,19A,90C,113C,190C,387C '/sample-aidlc-traceability':307C '0.1.0':250C '00':151C '11':150C '11/02/2026':149C '2026':137C,255C,271C,284C,322C '52p3':392C '7fh2':393C '96cf0ea':253C,270C,330C 'acknowledg':394C 'actor':213C 'address':263C 'agent':295C 'agent-n':294C 'ai':3A,22B,26B,34B,47B,72B,109C,132C,183C,221C 'ai-dlc':2A,46B,71B,108C,131C,182C,220C 'ai-dlc-workflow':21B 'ai-tool':25B 'aidlc':6A,29B,41B,104C,127C,156C,207C,266C,317C 'aidlc-trac':5A,28B,40B,103C,126C,155C,206C,265C,316C 'allow':211C 'anyon':83B 'arbitrari':227C 'artifact':53B,74B,185C,223C,244C,373C 'attack':64B 'attent':146C 'aw':1A,31B,33B,45B,107C,130C,139C,141C,305C 'aws-ai-dlc':32B 'aws-sampl':304C 'aws-security@amazon.com':415C 'awslabs/aidlc-workflows':170C,281C 'browser':81B,231C 'bulletin':135C 'cli':8A,43B,209C,275C,319C 'code':339C 'collabor':403C 'command':163C 'command-lin':162C 'commit':252C,269C,329C 'concern':421C 'content':142C 'control':376C 'coordin':409C 'copi':313C,353C,380C 'could':210C 'craft':243C 'cross':94C,117C,195C 'cross-sit':93C,116C,194C 'cve':15A,18A,89C,112C,189C,386C 'date':148C 'deriv':338C 'descript':56B,154C,247C 'disclosur':38B,411C 'dlc':4A,23B,35B,48B,73B,110C,133C,184C,222C 'edit':67B 'email':414C 'ensur':334C 'escap':52B 'execut':226C 'file':75B,186C,224C,374C 'fix':254C,342C 'fork':336C 'former':166C 'generat':87B,101C,124C,173C,203C,238C,349C 'ghsa':390C 'ghsa-gjmq-52p3-7fh2':389C 'gjmq':391C 'html':12A,60B,99C,122C,201C,239C,347C,367C 'id':136C 'identifi':188C 'impact':248C 'implement':299C 'import':144C 'incorpor':340C 'instead':365C 'issu':260C,406C 'kumar':401C 'lab':37B 'lab-disclosur':36B 'later':332C 'like':397C 'line':164C 'local':312C,379C 'longer':290C 'maintain':291C,301C 'markdown':362C 'matrix':176C 'modifi':216C 'nativ':296C 'obtain':320C 'open':85B,160C,236C,346C 'output':364C 'pleas':413C 'process':412C 'project':69B,180C,218C,359C 'pst':153C 'public':147C 'publish':167C 'question':419C 're':298C 're-implement':297C 'recommend':309C 'refer':385C 'regener':369C 'remov':278C,310C,384C 'report':14A,62B,88B,100C,123C,177C,202C,241C,348C,363C,370C 'repositori':171C,282C 'requir':145C 'resolut':258C 'run':77B 'sampl':306C 'scope':140C 'script':78B,96C,119C,197C,228C 'secur':418C 'separ':302C 'site':95C,118C,196C 'sourc':161C 'store':9A,92C,115C,193C 'subsequ':277C 'thank':399C 'titl':54B,245C 'tool':27B,165C,356C 'traceability-matrix':174C 'traceabl':7A,13A,30B,42B,61B,105C,128C,157C,175C,208C,240C,267C,318C 'type':143C 'unpatch':352C 'untrust':358C 'updat':326C,382C 'use':360C 'user':234C 'version':249C 'via':242C 'vignesh':400C 'vulner':410C 'workaround':343C 'workflow':24B,49B,111C,134C 'would':396C 'write':59B 'xss':10A,198C","nicknames":[],"mitigations":[{"kind":"workaround","scope":"aidlc-traceability CLI HTML report generator (unpatched copies)","since":null,"covers":"Reports from untrusted projects, by not opening unpatched HTML reports and using Markdown output or regenerating only from artifact files the team controls","limits":"Does not fix the HTML generator; HTML reports from projects the team controls remain unprotected while the local copy is unpatched","source":"https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/","vendor":"Team","seen_at":"2026-11-02T19:43:41Z","confidence":0.9,"source_title":"CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows","customer_action":"Do not open HTML reports from untrusted projects; use the Markdown report output, or regenerate reports only from artifact files you control, until the local copy is updated to commit 96cf0ea or later or removed"}],"who_affected":"Teams that generate HTML traceability reports with the aidlc-traceability CLI from AWS AI-DLC Workflows before 2026-07-03 are exposed, mainly where artifact files can be edited by others. Anyone who opens a generated report in a browser can be hit. Teams that never used the CLI or already have a newer copy can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aidlctraceability","aidlcworkflows","aitooling","aws","awsaidlc","labdisclosure","medium"],"first_public_at":"2026-11-02T19:07:10+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"ff89ba41-3aa1-4d27-914a-91399e9639e5","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-120497","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-120497","severity":null,"published_at":"2026-11-02T19:18:04+00:00","modified_at":"2026-11-02T19:18:04+00:00","first_seen_at":"2026-11-02T19:24:40+00:00","fetched_at":"2026-11-02T19:24:40+00:00","note":null},{"source":"lab","external_id":"https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/#CVE-2026-120497","url":"https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-02T19:43:52+00:00","fetched_at":"2026-11-02T19:43:52+00:00","note":"AWS: CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows"}],"documents":[{"id":53479,"url":"https://github.com/awslabs/aidlc-workflows/commit/96cf0eaa31a3ad8636e486c7fd2b91c55166393f","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":53480,"url":"https://github.com/awslabs/aidlc-workflows/security/advisories/GHSA-gjmq-52p3-7fh2","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-11-02T19:07:10+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"},{"id":53588,"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/","title":"AWS: CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows","kind":"advisory","source":"lab","publisher":"research","text":"CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows\n\n### CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows\n\nBulletin ID: 2026-163-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/02/2026 11:00 AM PST\n\nDescription:\n\naidlc-traceability is an open source command-line tool, formerly published in the awslabs/aidlc-workflows repository, that generates traceability-matrix reports from a project's AI-DLC artifact files. We identified CVE-2026-120497, where stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI could allow an actor who can modify a project's AI-DLC artifact files to execute arbitrary script in the browser of a user who opens a generated HTML traceability report via crafted artifact titles or descriptions.\n\nImpacted versions: >=0.1.0 AND <commit 96cf0ea (fixed 2026-07-03)\n\nResolution:\n\nThis issue has been addressed in aidlc-traceability at commit 96cf0ea (2026-07-03). The CLI was subsequently removed from the awslabs/aidlc-workflows repository on 2026-07-16 and is no longer maintained there; an agent-native re-implementation is maintained separately at aws-samples/sample-aidlc-traceability. We recommend removing any local copy of the aidlc-traceability CLI obtained before 2026-07-03, or updating it to commit 96cf0ea or later, and ensuring any forked or derivative code incorporates the fix.\n\nWorkarounds:\n\nDo not open HTML reports generated by an unpatched copy of the tool from untrusted projects. Use the Markdown report output instead of HTML, or regenerate reports only from artifact files you control, until the local copy is updated or removed.\n\nReferences:\n\n- CVE-2026-120497\n- GHSA-gjmq-52p3-7fh2\n\nAcknowledgement:\n\nWe would like to thank Vignesh Kumar for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","published_at":null,"relation":"advisory","confidence":null,"note":"AWS disclosure page"}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}