{"id":"CVE-2026-2477","kind":"vulnerability","aliases":["CVE-2026-2477"],"related":[],"title":"IBM watsonx Orchestrate: low-privileged users can call admin API endpoints","description":"IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 fails to enforce backend authorization checks, allowing low‑privileged users to directly invoke administrative API endpoints. This bypasses UI‑level access restrictions and may lead to unauthorized execution of privileged functions.","summary":"IBM watsonx Orchestrate Cartridge for Cloud Pak for Data fails to check authorization on the backend, so low-privileged users can call administrative API endpoints directly. This bypasses the access restrictions shown in the user interface and can allow privileged functions to run without authorization.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cloud-pak-for-data","ibm","self-hosted","vendor","watsonx-orchestrate"],"not_affected_if":["version-outside-range"],"how_to_check":"- Confirm whether your Cloud Pak for Data deployment runs the watsonx Orchestrate cartridge at a version in the affected ranges (4.8.4 through 4.8.5, or 5.0.0 through 5.4.2)","fix":"- Move to a fixed version of the watsonx Orchestrate cartridge; the sources do not name the fixed version","status":"open","published_at":"2026-11-08T19:17:39+00:00","first_seen_at":"2026-11-08T19:22:33+00:00","triaged_at":"2026-11-08T19:23:19+00:00","updated_at":"2026-11-08T19:23:19+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-08T19:23:19Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a fixed version of the watsonx Orchestrate cartridge; the sources do not name the fixed version\n- unknown otherwise","reach":"network","title":"IBM watsonx Orchestrate: low-privileged users can call admin API endpoints","impact":"medium","summary":"IBM watsonx Orchestrate Cartridge for Cloud Pak for Data fails to check authorization on the backend, so low-privileged users can call administrative API endpoints directly. This bypasses the access restrictions shown in the user interface and can allow privileged functions to run without authorization.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["ibm","watsonx-orchestrate","cloud-pak-for-data","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"low-privileged users run administrative functions without authorization","analyst_note":"Check the IBM security bulletin for CVE-2026-2477 for the fixed cartridge version and the list of affected admin endpoints; the NVD entry alone does not give them.","how_to_check":"- Confirm whether your Cloud Pak for Data deployment runs the watsonx Orchestrate cartridge at a version in the affected ranges (4.8.4 through 4.8.5, or 5.0.0 through 5.4.2)\n- unknown for any other check; the sources do not say which endpoints or settings to inspect","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["version-outside-range"],"who_is_affected":"Organizations running the IBM watsonx Orchestrate cartridge on IBM Cloud Pak for Data in the affected version ranges are exposed to the backend authorization gap. Deployments outside those ranges are not listed as affected. The sources do not say what the required low-privileged account role is.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000797,"input_tokens":4613,"output_tokens":672,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-2477':15A,18A '4.8.4':87C '4.8.5':89C '5.0.0':91C '5.4.2':93C 'access':62B,114C 'admin':10A 'administr':55B,107C 'allow':71B,100C 'api':11A,56B,108C 'author':44B,77B,98C 'backend':47B,97C 'bypass':60B,111C 'call':9A,54B 'cartridg':35B,81C 'check':43B,99C 'cloud':20B,37B,83C 'cloud-pak-for-data':19B 'cve':13A,16A 'data':23B,40B,86C 'direct':58B,105C 'endpoint':12A,57B,109C 'enforc':96C 'execut':121C 'fail':41B,94C 'function':73B,124C 'host':27B 'ibm':1A,24B,32B,78C 'interfac':68B 'invok':106C 'lead':118C 'level':113C 'low':5A,50B,101C 'low-privileg':4A,49B 'may':117C 'orchestr':3A,31B,34B,80C 'pak':21B,38B,84C 'privileg':6A,51B,72B,102C,123C 'restrict':63B,115C 'run':75B 'self':26B 'self-host':25B 'shown':64B 'ui':112C 'unauthor':120C 'user':7A,52B,67B,103C 'vendor':28B 'watsonx':2A,30B,33B,79C 'watsonx-orchestr':29B 'without':76B","nicknames":[],"mitigations":[],"who_affected":"Organizations running the IBM watsonx Orchestrate cartridge on IBM Cloud Pak for Data in the affected version ranges are exposed to the backend authorization gap. Deployments outside those ranges are not listed as affected. The sources do not say what the required low-privileged account role is.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["cloudpakfordata","ibm","medium","selfhosted","vendor","watsonxorchestrate"],"campaign_type":null,"search_a":"'-2026':14A,17A '-2477':15A,18A 'admin':10A 'api':11A 'call':9A 'cve':13A,16A 'endpoint':12A 'ibm':1A 'low':5A 'low-privileg':4A 'orchestr':3A 'privileg':6A 'user':7A 'watsonx':2A","search_b":"'access':62B 'administr':55B 'allow':71B 'api':56B 'author':44B,77B 'backend':47B 'bypass':60B 'call':54B 'cartridg':35B 'check':43B 'cloud':20B,37B 'cloud-pak-for-data':19B 'data':23B,40B 'direct':58B 'endpoint':57B 'fail':41B 'function':73B 'host':27B 'ibm':24B,32B 'interfac':68B 'low':50B 'low-privileg':49B 'orchestr':31B,34B 'pak':21B,38B 'privileg':51B,72B 'restrict':63B 'run':75B 'self':26B 'self-host':25B 'shown':64B 'user':52B,67B 'vendor':28B 'watsonx':30B,33B 'watsonx-orchestr':29B 'without':76B","search_c":"'4.8.4':87C '4.8.5':89C '5.0.0':91C '5.4.2':93C 'access':114C 'administr':107C 'allow':100C 'api':108C 'author':98C 'backend':97C 'bypass':111C 'cartridg':81C 'check':99C 'cloud':83C 'data':86C 'direct':105C 'endpoint':109C 'enforc':96C 'execut':121C 'fail':94C 'function':124C 'ibm':78C 'invok':106C 'lead':118C 'level':113C 'low':101C 'may':117C 'orchestr':80C 'pak':84C 'privileg':102C,123C 'restrict':115C 'ui':112C 'unauthor':120C 'user':103C 'watsonx':79C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T19:17:39+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-2477","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2477","severity":null,"published_at":"2026-11-08T19:17:39+00:00","modified_at":"2026-11-08T19:17:39+00:00","first_seen_at":"2026-11-08T19:22:33+00:00","fetched_at":"2026-11-08T19:22:33+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}