CVE-2026-82101: Path Traversal

Q: What level of access would an attacker need before attempting exploitation?

The attacker must be remotely authenticated to the DataStage on Cloud Pak for Data deployment. The available information does not indicate that unauthenticated exploitation is possible.

Published Sep 21, 2026

Updated

DataStage on Cloud Pak for Data could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.

Affected Software

1 affected componentFixes available

IBM DataStage on Cloud Pak for Data<=5.4.0.0

Event History

Sep 21, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7288649

Frequently Asked Questions

What level of access would an attacker need before attempting exploitation?

The attacker must be remotely authenticated to the DataStage on Cloud Pak for Data deployment. The available information does not indicate that unauthenticated exploitation is possible.