Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-36180 EUVD-2025-209603GHSA-842g-rrpf-rmq9

Inadequate Pod Communication Restrictions, affects watsonx.data

Published Apr 30, 2026 · Updated May 1, 2026 · Assigned by ibm

Description

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods without restrictions.

Affected products

VendorProductAffectedFixed
IBM watsonx.data 2.2.0 – ≤ 2.3.0 —

References