CVE-2026-81210

Received Received - Intake

IBM DataStage Cloud Pak Path Traversal Vulnerability

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: IBM Corporation

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 concatenates three caller-supplied strings into a String.format path on the shared /ds-storage RWX PVC and returns the file with no project ACL — pure IDOR plus traversal. Read is constrained to files named job.log/error.log, but DataStage job logs routinely carry connection strings, {dsnextenc} ciphertexts (decryptable via d2-f023), and customer-data row samples. This is the operator's tenant-to-tenant PVC-leakage threat verbatim; MEDIUM→HIGH via threat match.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-10

Generated

2026-09-11

AI Q&A

2026-09-11

EPSS Evaluated

N/A

NVD

CVE-2026-81210

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	datastage	5.4.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an attacker to read sensitive files from a shared storage volume due to improper path handling. The flaw occurs when three user-controlled strings are combined into a file path using String.format, enabling directory traversal and insecure direct object reference (IDOR). Attackers can access job logs containing connection strings, encrypted data, and customer data samples.

Detection Guidance

Check IBM DataStage on Cloud Pak for Data 5.4.0.0 logs for unauthorized access to /ds-storage PVC files named job.log or error.log. Monitor for unusual file reads or traversal attempts in shared storage paths.

Impact Analysis

This vulnerability could allow unauthorized access to sensitive data stored in job logs, including connection strings, decrypted ciphertexts, and customer data samples. Attackers could exploit it to leak data between tenants on the same shared storage volume, potentially leading to data breaches or compliance violations.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, violating GDPR's data protection principles and HIPAA's security requirements for protected health information. The risk of tenant-to-tenant data leakage may result in non-compliance with these regulations, potentially leading to legal penalties and reputational damage.

Mitigation Strategies

Upgrade IBM DataStage to a patched version. Restrict access to /ds-storage PVC using project ACLs. Disable shared RWX PVC access if possible. Review and remove sensitive data from job logs before storage.

Hi! I’m here to help you understand CVE-2026-81210. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70