CVE-2026-81212
CVE-2026-81212 · DataStage on Cloud Pak for Data Improper Authorization
This page contains facts from public vulnerability sources. Check the original advisory before updating.
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller poison any tenant's cached flow parameters.
CVSS 10.0 · Critical · EPSS 0.3%
- Published
- Updated
Affected products and versions
datastage on cloud pak for data
- Versions
- 5.4.0.0: Affected
No fix published