EUVD-2026-84977
GHSA-8vc6-mwhw-f8wg
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Network-reachable, low-complexity OS command injection needing an authenticated account (PR:L); command execution confined to the DataStage host argues S:U (vs vendor S:C) with full C/I/A impact.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
3DescriptionCVE.org
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
AnalysisAI
Authenticated OS command execution in IBM DataStage on Cloud Pak for Data 5.4.0.0 lets a remote attacker with a valid account plant special elements in a DataStage input path that are passed unsanitized into an operating-system command, resulting in arbitrary command execution with the privileges of the DataStage service. The prerequisite is a legitimate authenticated session (CVSS PR:L) on a network-reachable instance (AV:N/AC:L, UI:N), which limits realistic exposure to authorized users, compromised credentials, or malicious insiders on unpatched 5.4.0.0 deployments. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a valid authenticated account on an IBM DataStage on Cloud Pak for Data 5.4.0.0 instance (CVSS PR:L); no user interaction is needed (UI:N) and the vector is network-reachable (AV:N/AC:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS of 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) rates this near-maximum, but two signals temper real-world urgency. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Patch available per vendor advisory: IBM has published a fix through its support channel at https://www.ibm.com/support/pages/node/7288649, so the primary action is to apply the vendor-supplied update to any IBM DataStage on Cloud Pak for Data 5.4.0.0 deployment and to confirm the exact fixed build level with IBM before closing the finding, since no explicit fix version is stated in the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all IBM DataStage on Cloud Pak for Data 5.4.0.0 instances, restrict network reachability to trusted management networks where feasible, review active accounts for least privilege and disable unused or shared credentials, and enable enhanced logging for DataStage input paths and OS command execution. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Arbitrary file read, write, and delete on IBM DataStage on Cloud Pak for Data 5.4.0.0 is possible for an authenticated l
Improper authentication in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated (low-privileged) at
Arbitrary file creation in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker to write f
OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 lets a remote authenticated attacker with a low-priv
OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker holding only
OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 lets an authenticated remote attacker with only low-
OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an authenticated remote attacker holding low-
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker with low privileges to execute arbitr
OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 lets an authenticated remote user execute arbitrary
IBM DataStage on Cloud Pak for Data 5.4.0.0 fails to neutralize special elements that are passed into an OS command, all
OS command injection in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker holding only
OS command injection in the px-runtime component of IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an authenticated,
Same weakness CWE-285 – Improper Authorization
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today