---
id: "GHSA-gjmq-52p3-7fh2"
kind: "vulnerability"
aliases: ["GHSA-gjmq-52p3-7fh2"]
title: "CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["aidlc-traceability", "aws", "aws-ai-dlc", "html-reports", "lab-disclosure", "package"]
not_affected_if: ["markdown-output-only", "own-artifacts-only", "patched-commit"]
published_at: null
first_seen_at: "2026-11-02T19:43:52+00:00"
updated_at: "2026-11-02T19:45:17+00:00"
sources: [{"source": "lab", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/", "first_seen_at": "2026-11-02T19:43:52+00:00"}]
---

# CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

The aidlc-traceability command-line tool's HTML report generator does not sanitize artifact titles and descriptions, so crafted text in project artifact files can run script in the browser of anyone who opens the generated report. An attacker who can edit a project's AI-DLC artifact files can run script in a reviewer's browser.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether a local copy of the aidlc-traceability CLI exists and its commit: `git -C <path> rev-parse HEAD` compared with 96cf0ea
- Check whether generated HTML traceability reports are opened from untrusted projects

## Fix

- aidlc-traceability: commit `96cf0ea` (2026-07-03) or later; the CLI is no longer maintained in awslabs/aidlc-workflows, and its replacement is aws-samples/sample-aidlc-traceability
- Remove copies obtained before 2026-07-03 if not updated

## Timeline

- 2026-11-02T19:43:52+00:00 lab https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/ — AWS: CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

## Documents

- [advisory] AWS: CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/

## From the sources

CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

### CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

Bulletin ID: 2026-163-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/02/2026 11:00 AM PST

Description:

aidlc-traceability is an open source command-line tool, formerly published in the awslabs/aidlc-workflows repository, that generates traceability-matrix reports from a project's AI-DLC artifact files. We identified CVE-2026-120497, where stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI could allow an actor who can modify a project's AI-DLC artifact files to execute arbitrary script in the browser of a user who opens a generated HTML traceability report via crafted artifact titles or descriptions.

Impacted versions: >=0.1.0 AND <commit 96cf0ea (fixed 2026-07-03)

Resolution:

This issue has been addressed in aidlc-traceability at commit 96cf0ea (2026-07-03). The CLI was subsequently removed from the awslabs/aidlc-workflows repository on 2026-07-16 and is no longer maintained there; an agent-native re-implementation is maintained separately at aws-samples/sample-aidlc-traceability. We recommend removing any local copy of the aidlc-traceability CLI obtained before 2026-07-03, or updating it to commit 96cf0ea or later, and ensuring any forked or derivative code incorporates the fix.

Workarounds:

Do not open HTML reports generated by an unpatched copy of the tool from untrusted projects. Use the Markdown report output instead of HTML, or regenerate reports only from artifact files you control, until the local copy is updated or removed.

References:

- CVE-2026-120497
- GHSA-gjmq-52p3-7fh2

Acknowledgement:

We would like to thank Vignesh Kumar for collaborating on this issue through the coordinated vulnerability disclosure process.

 Please email aws-security@amazon.com with any security questions or concerns.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_