CVE-2026-80412

Received Received - Intake

Remote Code Execution in IBM DataStage on Cloud Pak for Data

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: IBM Corporation

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of connector property values during OSH script generation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-23

Last Modified

2026-09-23

Generated

2026-09-24

AI Q&A

2026-09-24

EPSS Evaluated

N/A

NVD

CVE-2026-80412

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	datastage	5.4.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker to execute arbitrary code. It occurs due to improper escaping of connector property values during OSH script generation, which could enable command injection.

Impact Analysis

An attacker could exploit this to run malicious code on the affected system, potentially leading to unauthorized access, data theft, or system compromise. This requires the attacker to have valid authentication credentials.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Apply the latest IBM DataStage patches or updates to address improper escaping in connector property values. Ensure all authenticated users follow least privilege principles and review connector configurations for suspicious values.

Hi! I’m here to help you understand CVE-2026-80412. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70