CVE-2026-16725 · Infrastructure
NO FIX YET
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a path traversal flaw. A logged-in remote attacker can read arbitrary files from the server's local filesystem.
first public Nov 4, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Organizations running IBM Watson Speech Services Cartridge in the affected version range are exposed, since an authenticated remote user can read arbitrary files. Systems outside this product and version range are not affected. The sources do not describe further conditions.
Not affected if outside-affected-versions
Who cares cp4d, ibm-watson, self-hosted
4.0.0 through 5.4.0No fix yet, per the sources.
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.