Description
IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple authenticated users submit report-related tasks simultaneously.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Cognos Analytics | 12.1.3 GA Version with build number – ≤ 12.1.3-2606251736 | — |
Advisories 1
- WID-SEC-2026-2395 IBM Cognos Analytics: Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Jul 19, 2026
References
- https://www.ibm.com/support/pages/node/7280311 vendor-advisory patch