Skip to content
OpenAdvisories
Low · 3.8 CVE-2025-36183 EUVD-2025-207803GHSA-mw8p-6vj4-pvjr

Privileged User File Upload Vulnerability Leading to Limited Server-Side Execution affects watsonx.data

Published Feb 17, 2026 · Updated Feb 18, 2026 · Assigned by ibm

Vendor: IBM Product: watsonx.data

Description

IBM watsonx.data 2.2 through 2.2.1 IBM Lakehouse could allow a privileged user to upload malicious files that could be executed server to modify limited files or data.

Affected products

VendorProductAffectedFixed
IBM watsonx.data 2.2 – ≤ 2.2.1 —

References