Skip to content
OpenAdvisories
Critical · 9.6 CVE-2026-82110 EUVD-2026-98070GHSA-p2ww-p967-mw39

DataStage on Cloud Pak for Data Path Traversal

Published Oct 12, 2026 · Updated Oct 12, 2026 · Assigned by ibm

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.

Affected products

VendorProductAffectedFixed
IBM DataStage on Cloud Pak for Data 5.4.0.0 —

References