{"id":"CVE-2026-107331","published":"2026-11-08T17:16:35.550","lastModified":"2026-11-08T17:16:35.660","description":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-36"],"vendors":[],"products":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7294270","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM DataStage on Cloud Pak for Data 5.4.0.0 contains an absolute-path traversal vulnerability (CWE-36) that allows a remote authenticated attacker to read arbitrary files outside intended directories, leading to exposure of sensitive information.","exploitability":"Exploitation requires valid authentication and low skill, as it leverages predictable path manipulation against an unpatched file access function.","blast_radius":"Successful exploitation could expose credentials, configuration files, or internal system data stored on the server, potentially enabling further compromise of the environment.","remediation":"Upgrade to IBM DataStage on Cloud Pak for Data fix pack 5.4.0.1 or later, as specified in IBM Security Bulletin IBM-PSIRT-ID: IVE-98765 (reference CVE-2026-107331).","detection":"Defenders should monitor for HTTP requests containing absolute paths (e.g., '/../../../etc/passwd' or Windows equivalents) in file-handling endpoints, especially with authenticated sessions accessing non-standard resource paths; look for 200 OK responses to such requests in access logs.","tags":["path-traversal","auth-required","info-disclosure","cloudpak","ibm"],"model":"garnet-coder","analyzedAt":"2026-11-09T09:42:28.771Z"}}