{"id":"CVE-2026-3684","kind":"vulnerability","aliases":["CVE-2026-3684"],"related":[],"title":"IBM Cloud Pak for Data System: admin users can read and write arbitrary files","description":"IBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001 through - 11.3.1.2 Interim Fix 002 could allow a user with administrative privileges to read and write arbitrary files on the system due to incorrect permission assignments.","summary":"IBM Cloud Pak for Data System builds 11.3.1.2 Interim Fix 001 through Interim Fix 002 assign incorrect file permissions. A user who already has administrative privileges can read and write arbitrary files on the system.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["appliance","ibm-cloud-pak-for-data","infrastructure","on-prem"],"not_affected_if":["no-admin-accounts-untrusted"],"how_to_check":"- Confirm the installed build is 11.3.1.2 Interim Fix 001 or Interim Fix 002 in the appliance console or vendor documentation","fix":null,"status":"open","published_at":"2026-11-08T19:17:39+00:00","first_seen_at":"2026-11-08T19:22:34+00:00","triaged_at":"2026-11-08T19:23:19+00:00","updated_at":"2026-11-08T19:23:19+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-08T19:23:19Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"IBM Cloud Pak for Data System: admin users can read and write arbitrary files","impact":"medium","summary":"IBM Cloud Pak for Data System builds 11.3.1.2 Interim Fix 001 through Interim Fix 002 assign incorrect file permissions. A user who already has administrative privileges can read and write arbitrary files on the system.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ibm-cloud-pak-for-data","appliance","on-prem"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Admin user reads and writes arbitrary system files","analyst_note":"Find the IBM security bulletin for CVE-2026-3684 to confirm the fixed build and any workaround.","how_to_check":"- Confirm the installed build is 11.3.1.2 Interim Fix 001 or Interim Fix 002 in the appliance console or vendor documentation\n- unknown: the sources do not describe a file or command to check permissions","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-admin-accounts-untrusted"],"who_is_affected":"Teams running IBM Cloud Pak for Data System appliances on the affected 11.3.1.2 interim fix builds. The flaw needs an account with administrative privileges, so exposure depends on who holds those accounts. Systems on other builds are not named in the advisory.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000732,"input_tokens":4564,"output_tokens":551,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':16A,19A '-3684':17A,20A '001':42B,76C '002':46B,81C '11.3.1.2':39B,73C,78C 'admin':7A 'administr':56B,87C 'allow':83C 'alreadi':54B 'applianc':21B 'arbitrari':13A,62B,93C 'assign':47B,102C 'build':38B 'cloud':2A,24B,33B,68C 'could':82C 'cve':15A,18A 'data':5A,27B,36B,71C 'due':98C 'file':14A,49B,63B,94C 'fix':41B,45B,75C,80C 'ibm':1A,23B,32B,67C 'ibm-cloud-pak-for-data':22B 'incorrect':48B,100C 'infrastructur':28B 'interim':40B,44B,74C,79C 'on-prem':29B 'pak':3A,25B,34B,69C 'permiss':50B,101C 'prem':31B 'privileg':57B,88C 'read':10A,59B,90C 'system':6A,37B,66B,72C,97C 'user':8A,52B,85C 'write':12A,61B,92C","nicknames":[],"mitigations":[],"who_affected":"Teams running IBM Cloud Pak for Data System appliances on the affected 11.3.1.2 interim fix builds. The flaw needs an account with administrative privileges, so exposure depends on who holds those accounts. Systems on other builds are not named in the advisory.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["appliance","ibmcloudpakfordata","infrastructure","medium","onprem"],"campaign_type":null,"search_a":"'-2026':16A,19A '-3684':17A,20A 'admin':7A 'arbitrari':13A 'cloud':2A 'cve':15A,18A 'data':5A 'file':14A 'ibm':1A 'pak':3A 'read':10A 'system':6A 'user':8A 'write':12A","search_b":"'001':42B '002':46B '11.3.1.2':39B 'administr':56B 'alreadi':54B 'applianc':21B 'arbitrari':62B 'assign':47B 'build':38B 'cloud':24B,33B 'data':27B,36B 'file':49B,63B 'fix':41B,45B 'ibm':23B,32B 'ibm-cloud-pak-for-data':22B 'incorrect':48B 'infrastructur':28B 'interim':40B,44B 'on-prem':29B 'pak':25B,34B 'permiss':50B 'prem':31B 'privileg':57B 'read':59B 'system':37B,66B 'user':52B 'write':61B","search_c":"'001':76C '002':81C '11.3.1.2':73C,78C 'administr':87C 'allow':83C 'arbitrari':93C 'assign':102C 'cloud':68C 'could':82C 'data':71C 'due':98C 'file':94C 'fix':75C,80C 'ibm':67C 'incorrect':100C 'interim':74C,79C 'pak':69C 'permiss':101C 'privileg':88C 'read':90C 'system':72C,97C 'user':85C 'write':92C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T19:17:39+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-3684","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3684","severity":null,"published_at":"2026-11-08T19:17:39+00:00","modified_at":"2026-11-08T19:17:39+00:00","first_seen_at":"2026-11-08T19:22:34+00:00","fetched_at":"2026-11-08T19:22:34+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}