CVE-2026-112369: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms.
Other sources
IBM Process Mining could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Process Miningto a version that resolves this vulnerability.Fixed in 2.2.1Patch IF001 - Operational
Open an IBM Support Portal case for IBM Process Mining, reference the published security advisory, and request delivery of IBM Process Mining 2.2.1 IF001 through the support case.
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated IBM Process Mining user is required. The provided information does not indicate that unauthenticated attackers can exploit it.
Which versions are affected?
IBM Process Mining versions 2.0.0 through 2.2.1 are identified as affected.
What could a successful attacker do?
An authenticated user could perform unauthorized actions because server-side security mechanisms are enforced on the client side. The supplied information indicates an integrity impact, but does not describe specific actions or data affected.