CVE-2026-107331

CVSS 9.9 (critical) · published 2026-11-08

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.

Weakness: CWE-36

Source: NVD CVE-2026-107331

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.