CVE-2025-36145
IBM watsonx.data Unrestricted File Transfer and Modification
Publication date: 2026-05-26
Last updated on: 2026-05-26
Assigner: IBM Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ibm | watsonx.data | From 2.2 (inc) to 2.3.1 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-923 | The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint. |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability in IBM Lakehouse allows unauthorized transfer or modification of files due to improper restrictions on inbound and outbound connections. Such unauthorized data access or modification could potentially lead to data breaches or leaks.
This kind of security weakness may impact compliance with data protection regulations like GDPR or HIPAA, which require strict controls to protect sensitive data from unauthorized access or alteration.
However, the provided information does not explicitly state the direct effects on compliance with these standards.
Can you explain this vulnerability to me?
CVE-2025-36145 affects IBM Lakehouse, where the software does not properly restrict inbound and outbound connections. This flaw could allow an attacker to transfer or modify files without proper authorization.
The vulnerability is classified under CWE-923, which relates to improper restriction of communication channels to intended endpoints.
How can this vulnerability impact me? :
Exploitation of this vulnerability could enable unauthorized file operations such as transferring or modifying files. This may lead to data leaks or system compromise.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, it is important to properly restrict inbound and outbound connections on IBM watsonx.data and IBM Lakehouse installations to prevent unauthorized file transfers or modifications.
Since the vulnerability arises from improper restriction of communication channels, reviewing and tightening network access controls, firewall rules, and application-level permissions is recommended.
Additionally, applying any available patches or updates from IBM addressing this issue should be prioritized.