CVE-2026-82100
IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a critical path traversal flaw that lets a remote authenticated attacker cause a denial of service. The vulnerability can crash the service with minimal effort and low privileges.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
IBM DataStage on Cloud Pak for Data 5.4.0.0
Real-world impact
An attacker who can authenticate to the system can exploit the flaw to bring the service down, disrupting business operations and potentially affecting all users of the platform.
Why this severity
The CVSS score of 9.6 reflects that the attack requires only low effort and low privileges, yet it can completely deny availability of the affected service, making it a critical risk.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources