CVE-2026-81207

high

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an o…

Vendor / product: Ibm — datastage on cloud pak for data

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an outbound fetch originating from a shared-infrastructure pod, and the WSDL body is reflected verbatim to the caller. The ds-canvas pod sits on the OpenShift overlay with reach to co-tenant services, in-cluster CP4D APIs, and link-local addresses. Scope is Changed, confidentiality High (response-reflecting), integrity Low (GET-only side-effects).

CVSS

8.5

8.5 (CVSS v3.1)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Severity source: NVD CVSS v3.1 (psirt@us.ibm.com)

Timeline (UTC)

Published: 2026-09-10 22:17

Modified: 2026-09-16 00:45

NVD status: Analyzed

Last synced 1 day ago

Verified against the source API 2026-10-27 06:52 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

ibm / datastage_on_cloud_pak_for_data 5.4.0

Weakness classification (CWE)

CWE-918

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Vendor advisory: https://www.ibm.com/support/pages/node/7286562

References

https://www.ibm.com/support/pages/node/7286562 psirt@us.ibm.com

Data sources

NVD CVE API 2.0 — fetched 2026-10-27 06:52 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

CVE-2026-81207

Affected products

Weakness classification (CWE)

Mitigation & advisories

References

Data sources

Learn the basics

Related CVEs