Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-1837 EUVD-2025-211278GHSA-h693-cjhw-whmq

Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge

Published Nov 8, 2026 · Updated Nov 9, 2026 · Assigned by ibm

Vendor: IBM Product: watsonx Orchestrate Cartridge for Cloud Pak for Data

Description

IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an authenticated user to perform unauthorized actions due to improper trust of server-side permission methods.

Affected products

VendorProductAffectedFixed
IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 – ≤ 4.8.5, 5.0.0 – ≤ 5.4.2 —

References