CVE-2026-80412: DataStage on Cloud Pak for Data has several vulnerabilities
DataStage on Cloud Pak for Data could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of connector property values during OSH script generation.
Other sources
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of connector property values during OSH script generation.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM DataStage on Cloud Pak for Datato a version that resolves this vulnerability.Patch 5.4 patch 7
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
Exploitation requires remote authenticated access to the affected DataStage on Cloud Pak for Data environment.
Which environments are in scope for triage?
IBM DataStage deployments running on Cloud Pak for Data are the affected product scope identified in the available information.