What is the CVSS score of CVE-2025-13689?

CVE-2025-13689 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Datastage On Cloud Pak For Data are affected by CVE-2025-13689?

DataStage On Cloud Pak for Data deployments are vulnerable to arbitrary file upload attacks that could allow attackers to execute malicious code and compromise data integrity.

How to fix or mitigate CVE-2025-13689?

Within 24 hours: Inventory all DataStage On Cloud Pak for Data instances and restrict administrative access to trusted networks only. Within 7 days: Implement file upload validation and disable or restrict DataStage file upload functionality if business-critical; deploy WAF rules to block suspicious file uploads. Within 30 days: Monitor vendor communications for patch availability and establish a testing environment for validation before production deployment.

Datastage On Cloud Pak For Data CVE-2025-13689

HIGH

Unrestricted Upload of File with Dangerous Type (CWE-434)

2026-02-17 psirt@us.ibm.com

IBM Datastage On Cloud Pak For Data

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 17, 2026 - 23:16 nvd

HIGH 8.8

DescriptionCVE.org

IBM DataStage on Cloud Pak for Data could allow an authenticated user to execute arbitrary commands and gain access to sensitive information due to unrestricted file uploads.

AnalysisAI

Datastage On Cloud Pak For Data is affected by unrestricted upload of file with dangerous type (CVSS 8.8).

Technical ContextAI

This vulnerability (CWE-434: Unrestricted Upload of File with Dangerous Type) affects Datastage On Cloud Pak For Data. IBM DataStage on Cloud Pak for Data could allow an authenticated user to execute arbitrary commands and gain access to sensitive information due to unrestricted file uploads.

RemediationAI

Monitor vendor advisories for a patch. Validate file types by content. Store uploads outside web root. Restrict network access to the affected service where possible.