{"id":"CVE-2026-112369","kind":"vulnerability","aliases":["CVE-2026-112369"],"related":[],"title":"IBM Process Mining: authenticated users can bypass server-side security checks","description":"IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms.","summary":"IBM Process Mining versions 2.0.0 through 2.2.1 rely on client-side checks for security controls that should be enforced on the server. A logged-in user can therefore perform actions they are not authorized to take.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ibm-process-mining","self-hosted","vendor"],"not_affected_if":["auth-required"],"how_to_check":"- Check the installed IBM Process Mining version against the affected range 2.0.0 through 2.2.1 in the product's admin or about page","fix":null,"status":"open","published_at":"2026-11-08T17:16:36+00:00","first_seen_at":"2026-11-08T17:22:00+00:00","triaged_at":"2026-11-08T17:22:09+00:00","updated_at":"2026-11-08T17:22:09+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-08T17:22:09Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM Process Mining: authenticated users can bypass server-side security checks","impact":"medium","summary":"IBM Process Mining versions 2.0.0 through 2.2.1 rely on client-side checks for security controls that should be enforced on the server. A logged-in user can therefore perform actions they are not authorized to take.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["ibm-process-mining","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"authenticated user performs unauthorized actions within the application","analyst_note":"Confirm the fixed version and the affected actions in the IBM security bulletin for Process Mining 2.x.","how_to_check":"- Check the installed IBM Process Mining version against the affected range 2.0.0 through 2.2.1 in the product's admin or about page\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["auth-required"],"who_is_affected":"Organizations running IBM Process Mining in the affected version range are exposed. The flaw requires a valid user account, so the risk is highest where many people have logins. Deployments outside 2.0.0 through 2.2.1 are not affected by this advisory.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000695,"input_tokens":4523,"output_tokens":486,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-112369':15A,18A '-2026':14A,17A '2.0.0':31B,68C '2.2.1':33B,70C 'action':58B,79C 'allow':72C 'authent':4A,74C 'author':62B 'bypass':7A 'check':12A,39B 'client':37B,83C 'client-sid':36B,82C 'control':42B 'could':71C 'cve':13A,16A 'due':80C 'enforc':46B,85C 'host':25B 'ibm':1A,20B,27B,65C 'ibm-process-min':19B 'log':52B 'logged-in':51B 'mechan':90C 'mine':3A,22B,29B,67C 'perform':57B,77C 'process':2A,21B,28B,66C 'reli':34B 'secur':11A,41B,89C 'self':24B 'self-host':23B 'server':9A,49B 'server-sid':8A 'sever':87C 'side':10A,38B,84C,88C 'take':64B 'therefor':56B 'unauthor':78C 'user':5A,54B,75C 'vendor':26B 'version':30B","nicknames":[],"mitigations":[],"who_affected":"Organizations running IBM Process Mining in the affected version range are exposed. The flaw requires a valid user account, so the risk is highest where many people have logins. Deployments outside 2.0.0 through 2.2.1 are not affected by this advisory.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["ibmprocessmining","medium","selfhosted","vendor"],"campaign_type":null,"search_a":"'-112369':15A,18A '-2026':14A,17A 'authent':4A 'bypass':7A 'check':12A 'cve':13A,16A 'ibm':1A 'mine':3A 'process':2A 'secur':11A 'server':9A 'server-sid':8A 'side':10A 'user':5A","search_b":"'2.0.0':31B '2.2.1':33B 'action':58B 'author':62B 'check':39B 'client':37B 'client-sid':36B 'control':42B 'enforc':46B 'host':25B 'ibm':20B,27B 'ibm-process-min':19B 'log':52B 'logged-in':51B 'mine':22B,29B 'perform':57B 'process':21B,28B 'reli':34B 'secur':41B 'self':24B 'self-host':23B 'server':49B 'side':38B 'take':64B 'therefor':56B 'user':54B 'vendor':26B 'version':30B","search_c":"'2.0.0':68C '2.2.1':70C 'action':79C 'allow':72C 'authent':74C 'client':83C 'client-sid':82C 'could':71C 'due':80C 'enforc':85C 'ibm':65C 'mechan':90C 'mine':67C 'perform':77C 'process':66C 'secur':89C 'sever':87C 'side':84C,88C 'unauthor':78C 'user':75C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T17:16:36+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112369","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112369","severity":null,"published_at":"2026-11-08T17:16:36+00:00","modified_at":"2026-11-08T17:16:36+00:00","first_seen_at":"2026-11-08T17:22:00+00:00","fetched_at":"2026-11-08T17:22:00+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}