CVE-2026-82101
9.6 CRITICALPublished 2026-10-12 · Updated 2026-10-14
AI risk analysis
- Summary
- A path traversal vulnerability in IBM DataStage on Cloud Pak for Data allows authenticated attackers to cause denial of service by manipulating file paths. This flaw enables attackers to access arbitrary files and potentially disrupt system operations.
- Exploitability
- Exploitation requires an authenticated user account with access to the DataStage service, making it moderately difficult to achieve but not highly complex.
- Blast radius
- If exploited, this vulnerability could lead to widespread denial of service across DataStage workflows and potentially allow unauthorized file access or modification in the affected system.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- No fixed version is published. Disable the affected DataStage endpoint or restrict access to authenticated users with minimal privileges until a patch is available.
dospath-traversalcloud-pak
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
Weaknesses
CWE-22
Vendors
ibm
Products
datastage on cloud pak for data
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-82110
- HIGHCVE-2026-84247
- HIGHCVE-2014-125130PoC
- HIGHCVE-2024-58387PoC
- HIGHCVE-2026-100636PoC
- HIGHCVE-2026-101153
- HIGHCVE-2026-101885PoC
- HIGHCVE-2026-102226
Related by shared AI tags and CWE weakness class. Browse the full archive.