Information Disclosure Vulnerability in IBM Lakehouse Product

CVE-2025-36146

What is CVE-2025-36146?

The vulnerability in IBM Lakehouse (watsonx.data 2.2) enables authenticated users to access sensitive information regarding server component versions. This exposure could potentially assist malicious actors in planning further attacks on the system, thereby compromising the overall security posture of the organization. Organizations utilizing this version should prioritize reviewing their security measures and applying necessary patches to mitigate risk.

References