CVE-2026-82107
IBM DataStage on Cloud Pak for Data 5.4.0.0 has a critical authentication flaw that lets a logged‑in attacker read sensitive data and bypass security controls. The vulnerability is due to improper authentication checks and can be exploited over the network by anyone who can log in.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
IBM DataStage on Cloud Pak for Data version 5.4.0.0, used by enterprises that run data integration pipelines on IBM Cloud Pak for Data.
Real-world impact
An attacker who can authenticate to the system can read confidential data and override security restrictions, potentially exposing sensitive business information.
Why this severity
The CVSS score of 9.6 reflects that the flaw is exploitable over the network, requires only low effort, and gives the attacker high confidentiality impact while the integrity impact is not affected. The score is high because the attacker can bypass authentication and gain access to protected data.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources