What happened
Stored cross-site scripting in the HTML report generator of the aidlc-traceability CLI in AWS AI-DLC Workflows (published 2026-11-02, CVSS 3.1 5.0 / CVSS 4.0 4.6). It is a local, user-interaction-required stored XSS that requires the ability to modify a project's artifacts and a user to view the resulting report.
Why it matters
Although low severity, this is a catalogued flaw in AWS's own AI deep-learning-container workflow tooling: anyone who can influence a project's AI-DLC artifact files can inject script into a traceability report, which is typically shared with reviewers and auditors — a plausible path to phishing or credential-touching script in an AI/ML supply-chain workflow context.
Attack vector
Crafted artifact titles or descriptions in a project's AI-DLC artifact files are embedded without sanitization into the generated HTML traceability report; a user who opens that report in a browser executes the stored script in the context of the reporting page.
Affected systems
AWS aidlc-traceability CLI (awslabs/aidlc-workflows) before commit 96cf0ea; fixed by commit 96cf0ea or by updating/removing local copies
Mitigation
Remove local copies of aidlc-traceability obtained before 2026-07-03, or update to commit 96cf0ea or later; note the CLI was removed from the repository on 2026-07-16.