{"id":"CVE-2026-16725","kind":"vulnerability","aliases":["CVE-2026-16725"],"related":[],"title":"IBM Watson Speech Services: authenticated remote users can read arbitrary local files","description":"IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.","summary":"IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a path traversal flaw. A logged-in remote attacker can read arbitrary files from the server's local filesystem.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cp4d","ibm-watson","infrastructure","self-hosted"],"not_affected_if":["outside-affected-versions"],"how_to_check":"- Confirm whether IBM Watson Speech Services Cartridge is deployed and check its version against `4.0.0` through `5.4.0`","fix":null,"status":"open","published_at":"2026-11-04T21:18:12+00:00","first_seen_at":"2026-11-04T21:49:23+00:00","triaged_at":"2026-11-04T21:51:12+00:00","updated_at":"2026-11-04T21:51:12+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-04T21:51:12Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM Watson Speech Services: authenticated remote users can read arbitrary local files","impact":"medium","summary":"IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a path traversal flaw. A logged-in remote attacker can read arbitrary files from the server's local filesystem.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ibm-watson","cp4d","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker reads arbitrary files from the server filesystem","analyst_note":"Confirm the fixed version and any workaround from the IBM security bulletin for CVE-2026-16725; the NVD entry gives no fix.","how_to_check":"- Confirm whether IBM Watson Speech Services Cartridge is deployed and check its version against `4.0.0` through `5.4.0`\n- unknown for other checks; the sources do not say which setting or file is involved","plain_action":"","needs_analyst":true,"not_affected_if":["outside-affected-versions"],"who_is_affected":"Organizations running IBM Watson Speech Services Cartridge in the affected version range are exposed, since an authenticated remote user can read arbitrary files. Systems outside this product and version range are not affected. The sources do not describe further conditions.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000677,"input_tokens":4101,"output_tokens":534,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-16725':15A,18A '-2026':14A,17A '4.0.0':33B,62C '5.4.0':35B,64C 'allow':66C 'arbitrari':10A,49B,73C 'attack':46B,70C 'authent':5A,69C 'cartridg':31B,61C 'contain':36B 'could':65C 'cp4d':19B 'cve':13A,16A 'due':79C 'file':12A,50B,74C 'filesystem':56B,78C 'flaw':40B 'host':26B 'ibm':1A,21B,27B,57C 'ibm-watson':20B 'infrastructur':23B 'local':11A,55B,77C 'log':43B 'logged-in':42B 'path':38B,81C 'read':9A,48B,72C 'remot':6A,45B,68C 'self':25B 'self-host':24B 'server':53B 'servic':4A,30B,60C 'speech':3A,29B,59C 'travers':39B,82C 'user':7A 'version':32B 'watson':2A,22B,28B,58C","nicknames":[],"mitigations":[],"who_affected":"Organizations running IBM Watson Speech Services Cartridge in the affected version range are exposed, since an authenticated remote user can read arbitrary files. Systems outside this product and version range are not affected. The sources do not describe further conditions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["cp4d","ibmwatson","infrastructure","medium","selfhosted"],"campaign_type":null,"first_public_at":"2026-11-04T21:18:12+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-16725","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16725","severity":null,"published_at":"2026-11-04T21:18:12+00:00","modified_at":"2026-11-04T21:18:12+00:00","first_seen_at":"2026-11-04T21:49:23+00:00","fetched_at":"2026-11-04T21:49:23+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}