CVE-2026-81212
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary…
- Risk score
- 79/100
- CVSS
- 10.0 v3.1
- Exploit chance (30 days)
- 0.3%
- Published
- 20 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- IBM DataStage on Cloud Pak for Data 5.4.0.0 has a vulnerability allowing an unauthenticated user to perform arbitrary writes to shared Redis, potentially poisoning cached flow parameters.
- Affected
- {'products': ['IBM DataStage on Cloud Pak for Data'], 'packages': [], 'versions': ['5.4.0.0']}
- Fix
- Check the linked advisory for the concrete fix.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 10.0 critical
- Remotely exploitable without logging in
- On your watchlist: redis
References
Original description
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller poison any tenant's cached flow parameters.
Last activity 20 Oct 2026. Patch Forecast updates every hour.