rootpwn

critical · CVSS v3 8.8

CVE-2026-17102

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to remote command execution via improper sanitization of OS command elements. An a

Overview

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to remote command execution via improper sanitization of OS command elements. An authenticated attacker can run arbitrary commands on the host, potentially compromising the entire system.

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Impact

Confidentiality: attacker can read sensitive data. Integrity: attacker can modify or delete data. Availability: attacker can disrupt services. The primary impact is on systems running IBM DataStage on Cloud Pak for Data 5.4.0.0, affecting organizations that rely on this data integration platform.

Remediation

Apply the official IBM security patch for DataStage 5.4.0.0 released on the vendor’s advisory. If patching is delayed, restrict network access to the DataStage service, enforce least privilege for authenticated users, and monitor for anomalous command execution. Consider upgrading to a newer, patched version as soon as possible.

Risk context

Severity is critical with a CVSS v3 score of 8.8, indicating high risk. No EPSS data is available, but the vulnerability allows remote command execution, warranting prompt remediation.

Affected products

  • IBM DataStage on Cloud Pak for Data 5.4.0.0

Scores

Severity
critical
CVSS v2
9
CVSS v3
8.8
CVSS v4
—
EPSS
—

remote command execution IBM DataStage Cloud Pak for Data critical authentication OS command injection

← All CVEs

Related CVEs

critical

CVE-2026-17472

IBM Concert 1.0.0-3.0.0 allows a remote authenticated attacker to access or modify resources they should not have permission for due to wildcard RBAC definitions. This can lead to unauthorized data exposure or tampering. The flaw is critical and requires immediate attention.

View analysis

critical

CVE-2026-17635

IBM Financial Transaction Manager (FTM) on RedHat OpenShift contains a critical flaw that allows remote attackers to bypass HTTP method restrictions and perform unauthorized actions. The vulnerability stems from misconfigured security constraints that fail to enforce proper method validation. It can lead to unauthorized data manipulation or system compromise.

View analysis

critical

CVE-2026-17636

IBM Financial Transaction Manager (FTM) for RedHat OpenShift has a critical flaw that allows a remote authenticated attacker to execute arbitrary code by exploiting improper quantity validation. The vulnerability can be leveraged to compromise the entire transaction processing environment. It is relevant to organizations running FTM on OpenShift clusters.

View analysis

critical

CVE-2026-17645

IBM Financial Transaction Manager (FTM) for RedHat OpenShift has a critical privilege escalation flaw that allows a remote authenticated attacker to gain elevated privileges. The vulnerability arises from improper privilege management in the application. It can lead to unauthorized access to sensitive financial data and system control.

View analysis