CVE-2026-81539: DataStage on Cloud Pak for Data has several vulnerabilities
DataStage on Cloud Pak for Data could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Other sources
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM DataStage on Cloud Pak for Datato a version that resolves this vulnerability.Patch patch 7
Event History
Frequently Asked Questions
What level of access does an attacker need?
The attacker must be remote and authenticated to the affected IBM DataStage on Cloud Pak for Data deployment.
Can an unauthenticated internet user exploit this issue directly?
The available information identifies this as an authenticated vulnerability. It does not indicate that unauthenticated exploitation is possible.