CVE-2026-82093: IBM DataStage on Cloud Pak for Data vulnerability

Q: What level of access does an attacker need to exploit this issue?

The attacker must be remotely authenticated. The available information does not indicate that unauthenticated attackers can exploit it.

Q: What is the potential impact of successful exploitation?

A successful attacker could execute arbitrary code on the affected IBM DataStage on Cloud Pak for Data deployment.

Published Sep 21, 2026

Updated

DataStage on Cloud Pak for Data could allow a remote authenticated attacker to execute arbitrary code due to unsafe deserialization of untrusted data.

Affected Software

1 affected componentFixes available

IBM DataStage on Cloud Pak for Data<=5.4.0.0

Event History

Sep 21, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7288649

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must be remotely authenticated. The available information does not indicate that unauthenticated attackers can exploit it.

What is the potential impact of successful exploitation?

A successful attacker could execute arbitrary code on the affected IBM DataStage on Cloud Pak for Data deployment.