{"id":"CVE-2026-82101","published":"2026-10-12T23:17:41.897","lastModified":"2026-10-14T23:51:06.323","description":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","cwes":["CWE-22"],"vendors":["ibm"],"products":["datastage on cloud pak for data"],"references":[{"url":"https://www.ibm.com/support/pages/node/7288649","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A path traversal vulnerability in IBM DataStage on Cloud Pak for Data allows authenticated attackers to cause denial of service by manipulating file paths. This flaw enables attackers to access arbitrary files and potentially disrupt system operations.","exploitability":"Exploitation requires an authenticated user account with access to the DataStage service, making it moderately difficult to achieve but not highly complex.","blast_radius":"If exploited, this vulnerability could lead to widespread denial of service across DataStage workflows and potentially allow unauthorized file access or modification in the affected system.","remediation":"No fixed version is published. Disable the affected DataStage endpoint or restrict access to authenticated users with minimal privileges until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dos","path-traversal","cloud-pak"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:48:04.351Z"}}