Path Traversal Vulnerability in IBM DataStage on Cloud Pak for Data
CVE-2026-16433

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Datastage On Cloud Pak For Data
Vendor
CVE Published:
8 November 2026

What is CVE-2026-16433?

A vulnerability exists in IBM DataStage on Cloud Pak for Data 5.4.0.0 that allows a remote authenticated attacker to exploit the application by manipulating file paths. This can lead to arbitrary file writing on the server, which may compromise sensitive data and system integrity. Users are urged to apply available patches and follow best security practices to mitigate this risk.

Affected Version(s)

DataStage on Cloud Pak for Data 5.4.0.0

References

https://www.ibm.com/support/pages/node/7294270
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.