Cross-Site Request Forgery Vulnerability in IBM DataStage on Cloud Pak for Data
CVE-2026-80380

7.1HIGH

Key Information:

Vendor

IBM
Status
Datastage On Cloud Pak For Data
Vendor
CVE Published:
10 September 2026

What is CVE-2026-80380?

IBM DataStage on Cloud Pak for Data versions prior to 5.4.0.0 are vulnerable to a cross-site request forgery (CSRF) attack. This vulnerability could allow a remote attacker to perform unauthorized actions on behalf of a legitimate user, potentially compromising sensitive data and user permissions. It is crucial for users to implement security measures to mitigate this risk and ensure their environments are up to date.

Affected Version(s)

DataStage on Cloud Pak for Data 5.4.0.0

References

https://www.ibm.com/support/pages/node/7286562
vendor-advisorypatch

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.