Low severity3.5NVD Advisory· Published Sep 13, 2026

CVE-2026-90602

Description

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Anil Matcha/Open Generative AIreferences

Patches

Vulnerability mechanics

References

github.com/Anil-matcha/Open-Generative-AI/issues/309nvd
github.com/Anil-matcha/Open-Generative-AI/pull/344nvd
vuldb.com/cve/CVE-2026-90602nvd
vuldb.com/submit/914004nvd
vuldb.com/vuln/403184nvd
vuldb.com/vuln/403184/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000