File Upload Vulnerability in IBM Process Mining Affects User Security
CVE-2026-108292

5.5MEDIUM

Key Information:

Vendor

IBM
Status
Process Mining
Vendor
CVE Published:
8 November 2026

What is CVE-2026-108292?

IBM Process Mining versions 2.0.0 to 2.2.1 contain a vulnerability that enables authenticated users to upload files of potentially dangerous types. If these files are opened by other users, it could lead to execution of malicious code, presenting significant risks to user security and system integrity. Immediate attention and patching are advised to mitigate this risk.

Affected Version(s)

Process Mining 2.0.0 <= 2.2.1

References

https://www.ibm.com/support/pages/node/7294875
vendor-advisorypatch

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.