High · 8.5 CVE-2026-81540 EUVD-2026-75775GHSA-2q7h-5w6p-6wqh

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Published Sep 10, 2026 · Updated Sep 15, 2026 · Assigned by ibm

Vendor: IBM Product: DataStage on Cloud Pak for Data

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belonging to other tenants due to a path traversal vulnerability.

Affected products

Vendor	Product	Affected	Fixed
IBM	DataStage on Cloud Pak for Data	5.4.0.0	—

References

https://www.ibm.com/support/pages/node/7286562 vendor-advisory patch