Skip to content
OpenAdvisories
Low · 2.7 CVE-2025-0166 EUVD-2025-211277GHSA-mc6r-q9q4-hxpv

Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge

Published Nov 8, 2026 · Updated Nov 9, 2026 · Assigned by ibm

Vendor: IBM Product: watsonx Orchestrate Cartridge for Cloud Pak for Data

Description

IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could disclose sensitive source code information that should not be accessible.

Affected products

VendorProductAffectedFixed
IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 – ≤ 4.8.5, 5.0.0 – ≤ 5.4.2 —

References