CVE-2026-114464

Summary

IBM Process Mining versions 2.0.0 through 2.2.1 suffer from improper access control, allowing a remote attacker with network access to view sensitive data without authentication or authorization. This flaw enables unauthorized disclosure of potentially confidential process mining information.

Exploitability

Exploitation requires only network access to the affected system and no prior authentication or user interaction, making it highly exploitable by remote attackers.

Blast radius

Successful exploitation could expose sensitive operational data, including business process models, logs, or metrics, potentially impacting confidentiality across the organization's process mining environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Process Mining 2.3.0 or later, as this version includes the fix for CVE-2026-114464.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.