CVE-2026-17102

Summary

A remote attacker with valid credentials can execute arbitrary commands on the system, leading to potential data theft or system compromise.

Exploitability

Exploitation requires valid credentials and network access to the affected IBM DataStage instance. The attacker must have the ability to craft and inject OS commands.

Blast radius

If exploited, the attacker could gain full control over the system, leading to data loss, system disruption, or unauthorized access to sensitive information.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM DataStage on Cloud Pak for Data 5.4.0.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.