High · 8.8 CVE-2025-13689 EUVD-2025-207821GHSA-wprr-57fw-46wj

DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment

Published Feb 17, 2026 · Updated Feb 26, 2026 · Assigned by ibm

Vendor: IBM Product: DataStage on Cloud Pak

Description

IBM DataStage on Cloud Pak for Data could allow an authenticated user to execute arbitrary commands and gain access to sensitive information due to unrestricted file uploads.

Affected products

Vendor	Product	Affected	Fixed
IBM	DataStage on Cloud Pak	5.1.2 – ≤ 5.3.0	—

References

https://www.ibm.com/support/pages/node/7259958