CVE-2026-81547: DataStage on Cloud Pak for Data has several vulnerabilities
Published Sep 21, 2026
·Updated
DataStage on Cloud Pak for Data could allow a remote authenticated attacker to execute arbitrary commands due to path traversal.
Other sources
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to path traversal.
— MITRE
Affected Software
2 affected componentsFixes available
IBM DataStage on Cloud Pak for Data<=5.4.0.0
IBM DataStage on Cloud Pak for Data=5.4.0
Remediation
Information
IBM strongly recommends addressing the vulnerability now by upgrading DataStage on Cloud Pak for Data.
Product(s)Version(s) number and/or range Remediation/Fix/InstructionsDataStage on Cloud Pak for Data5.4.0.0
Upgrade to 5.4 patch 7 or later by following these instructions https://www.ibm.com/docs/en/software-hub/5.4.x .
Patch Available
Event History
Sep 21, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Sep 24, 2026
CVE Published
via MITRE·02:25 PM
Data Sourced
via MITRE·02:25 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Does exploitation require authentication?
Yes. The vulnerability is described as requiring a remote authenticated attacker; unauthenticated exploitation is not indicated by the available information.