CVE-2026-81212

Summary

An unauthenticated attacker can write arbitrary data to Redis under any tenant's key, collapsing the credential encryption boundary and allowing them to poison cached flow parameters for any tenant. This represents a critical authorization flaw in IBM DataStage on Cloud Pak for Data 5.4.0.0.

Exploitability

The exploit is trivial to execute with no prerequisites since the service allows unauthenticated access and the vulnerability is an arbitrary write into Redis.

Blast radius

An attacker could compromise any tenant's cached flow parameters, potentially leading to unauthorized data processing flows and credential exposure across all tenants in the platform.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM DataStage on Cloud Pak for Data 5.4.0.1 or later to address this arbitrary write vulnerability in Redis.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.