CVE-2026-81554: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
DataStage on Cloud Pak for Data could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.
Other sources
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM DataStage on Cloud Pak for Datato a version that resolves this vulnerability.Fixed in 5.4 patch 5 or later
Event History
Frequently Asked Questions
Which deployments are confirmed to be affected?
IBM DataStage on Cloud Pak for Data version 5.4.0.0 is identified as affected. No other versions or deployment configurations are specified in the provided information.
What level of access does an attacker need?
The attacker must be remote and authenticated. No user interaction is required.
What is the likely impact of successful exploitation?
Successful exploitation could allow an authenticated remote attacker to obtain sensitive information through an absolute-path traversal issue. The supplied severity vector also rates confidentiality, integrity, and availability impact as high.