Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-80424 EUVD-2026-75787GHSA-q3xg-gg47-cm2f

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Published Sep 10, 2026 · Updated Sep 15, 2026 · Assigned by ibm

Vendor: IBM Product: DataStage on Cloud Pak for Data

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to path traversal during archive extraction.

Affected products

VendorProductAffectedFixed
IBM DataStage on Cloud Pak for Data 5.4.0.0 —

References