--- id: "CVE-2026-120497" kind: "vulnerability" aliases: ["CVE-2026-120497"] title: "AWS AI-DLC aidlc-traceability CLI: stored XSS in HTML traceability reports" severity: "medium" cvss: 5.0 epss: null exploited: false status: "open" category: "ai-tooling" products: [] ecosystems: [] tags: ["ai-dlc-workflows", "ai-tooling", "aidlc-traceability", "aws", "aws-ai-dlc", "lab-disclosure"] not_affected_if: ["artifacts-not-shared", "no-html-reports", "updated-cli"] published_at: "2026-11-02T19:18:04+00:00" first_seen_at: "2026-11-02T19:24:40+00:00" updated_at: "2026-11-02T19:43:52+00:00" sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120497", "first_seen_at": "2026-11-02T19:24:40+00:00"}, {"source": "lab", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/", "first_seen_at": "2026-11-02T19:43:52+00:00"}] --- # AWS AI-DLC aidlc-traceability CLI: stored XSS in HTML traceability reports The aidlc-traceability CLI in AWS AI-DLC Workflows does not escape artifact titles and descriptions when it writes HTML traceability reports. An attacker who can edit a project's AI-DLC artifact files can run script in the browser of anyone who opens a generated report. _Summary, check and fix written by a model from the sources; labelled as such._ ## How to check - Look for a local copy of the aidlc-traceability CLI and check whether it was obtained before 2026-07-03. - Check whether the copy includes commit `96cf0ea` or later. ## Fix - Update the aidlc-traceability CLI to commit `96cf0ea` or later. - The CLI was removed from the repository on 2026-07-16; remove any local copy obtained before 2026-07-03. ## Mitigated for you by - Team (workaround): covers Reports from untrusted projects, by not opening unpatched HTML reports and using Markdown output or regenerating only from artifact files the team controls Limits: Does not fix the HTML generator; HTML reports from projects the team controls remain unprotected while the local copy is unpatched Still: Do not open HTML reports from untrusted projects; use the Markdown report output, or regenerate reports only from artifact files you control, until the local copy is updated to commit 96cf0ea or later or removed https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/ ## Timeline - 2026-11-02T19:24:40+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120497 - 2026-11-02T19:43:52+00:00 lab https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/ — AWS: CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows ## Documents - [advisory] Vendor advisory: github.com https://github.com/awslabs/aidlc-workflows/security/advisories/GHSA-gjmq-52p3-7fh2 - [advisory] AWS: CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/ - [fix] Patch: github.com https://github.com/awslabs/aidlc-workflows/commit/96cf0eaa31a3ad8636e486c7fd2b91c55166393f ## From the sources CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows ### CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows Bulletin ID: 2026-163-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/02/2026 11:00 AM PST Description: aidlc-traceability is an open source command-line tool, formerly published in the awslabs/aidlc-workflows repository, that generates traceability-matrix reports from a project's AI-DLC artifact files. We identified CVE-2026-120497, where stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI could allow an actor who can modify a project's AI-DLC artifact files to execute arbitrary script in the browser of a user who opens a generated HTML traceability report via crafted artifact titles or descriptions. Impacted versions: >=0.1.0 AND