FDA weighs action on Zolgensma and Itvisma after confirmed AAV insertional oncogenesis

What happened

On 6 November 2026, FDA's Center for Biologics Evaluation and Research (CBER) said it is investigating a serious malignancy risk linked to Zolgensma gene therapy. According to the notice, the agency is citing confirmed AAV vector insertional oncogenesis involving GLI1. CBER says it is assessing whether regulatory action is needed following postmarketing reports of malignancy.

The agency also states that the neoplasia risk applies to both onasemnogene abeparvovec products, Zolgensma and Itvisma. The two products share an active substance, so a vector-related safety finding is treated as a class-of-one issue rather than a single-brand problem.

The records do not say how many reports CBER has received, which tumour types were involved, how long after dosing they appeared, or what actions the agency is considering. Those details are not yet known from the material available, and nothing should be inferred about outcomes.

Why it matters for pharmacovigilance

Insertional oncogenesis is a mechanistic concern with integrating gene-therapy vectors. In general terms, it means vector DNA lands in the host genome in a way that disturbs the control of a nearby gene and could contribute to malignant transformation. CBER's wording, which cites a confirmed mechanism involving a named gene, goes beyond a statistical signal in spontaneous reports. A biologically plausible pathway strengthens the case for causality assessment.

That distinction matters for how PV teams work. A disproportionality signal can often be parked while more data accumulate. A confirmed mechanism changes the weight given to individual case reports, including those that are poorly documented. It also raises the value of specific follow-up, such as tumour histology and molecular characterisation where available, because those data can show whether a case fits the described mechanism.

Regulatory context: interim measures versus waiting for answers

The FDA notice says only that action is under assessment. The same week, the UK's MHRA gave a contrasting example of how a regulator can act while an investigation is still running. For Duvyzat (givinostat), MHRA issued interim advice proposing more frequent ECG and electrolyte checks after international reports of deaths in patients with Duchenne muscular dystrophy. It said implementation is subject to an ongoing independent review, and that no deaths have been reported in the UK.

The two cases differ in drug class, risk and evidence, so they should not be equated. Together they show a pattern: regulators are increasingly willing to communicate a risk early, before the full assessment is finished. For marketing authorisation holders, that means the gap between a regulator opening an inquiry and expecting a response can be short.

Not every safety review leads to change. EMA's PSUSA outcomes published on 5 November for diethylamine-salicylate/escin and ethinylestradiol/gestodene both ended in maintenance of authorisations. These are routine, periodic assessments of established products, a different process from a CBER investigation into a confirmed mechanism. They are a reminder that the outcome of a safety review is not predetermined.

Who is affected

The most directly affected are the sponsor of the onasemnogene abeparvovec products and the clinicians treating patients with them. The records do not describe any label change, restriction or communication to prescribers, so the practical consequences are not yet known.

Other gene-therapy sponsors are also affected indirectly. A regulator that names a specific integration-related mechanism for an AAV product may ask about the same issue elsewhere, in risk management plans, long-term follow-up designs and signal evaluation. The records do not say CBER has taken that step, so this is a point to watch, not a finding.

Outside the gene-therapy field, the week's other records show the breadth of safety work: a Spanish alert on Likorall ceiling patient lifts and a Helena Laboratories field safety notice on its V8 UltraCE analyser. These are device matters and unrelated to the Zolgensma inquiry, but they come from the same regulatory-vigilance environment. EMA's Q&A for MAHs on the nitrosamine impurities referral (Article 5(3), EMEA-H-A5(3)-1490) is another reminder that safety and quality obligations continue in parallel.

What to watch

The first question is whether CBER's assessment leads to a formal action, and in what form. The record gives no timeline. The second is whether FDA publishes case counts, tumour characteristics or follow-up data. The third is whether other regulators, including EMA and MHRA, publish their own positions on onasemnogene abeparvovec.

Teams should also watch for any sponsor communication to healthcare professionals. Until the agency or the sponsor says more, the sound position is to treat the mechanism as confirmed per CBER, treat the scale of the risk as unknown, and make sure case handling is ready to produce better data.