{"id":"CVE-2026-81542","kind":"vulnerability","aliases":["CVE-2026-81542"],"related":[],"title":"IBM DataStage on Cloud Pak for Data: path traversal lets users delete arbitrary files","description":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.","summary":"IBM DataStage on Cloud Pak for Data 5.4.0.0 has a path traversal flaw. A logged-in remote user can use it to delete arbitrary files on the server.","severity":"medium","cvss":6.4,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"IBM DataStage on Cloud Pak for Data","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["cloud-pak-for-data","ibm-datastage","vendor"],"not_affected_if":[],"how_to_check":"- Check whether the deployment runs IBM DataStage on Cloud Pak for Data version `5.4.0.0`, per IBM's product records.","fix":null,"status":"open","published_at":"2026-11-08T19:17:41+00:00","first_seen_at":"2026-11-08T19:22:34+00:00","triaged_at":"2026-11-08T19:23:19+00:00","updated_at":"2026-11-08T19:23:19+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-08T19:23:19Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM DataStage on Cloud Pak for Data: path traversal lets users delete arbitrary files","impact":"medium","summary":"IBM DataStage on Cloud Pak for Data 5.4.0.0 has a path traversal flaw. A logged-in remote user can use it to delete arbitrary files on the server.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["ibm-datastage","cloud-pak-for-data"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Authenticated remote user deletes arbitrary files on the server","analyst_note":"Check IBM's security bulletin for the fixed version and the affected feature; the NVD entry alone does not give either.","how_to_check":"- Check whether the deployment runs IBM DataStage on Cloud Pak for Data version `5.4.0.0`, per IBM's product records.\n- unknown for other checks; the sources do not say.","plain_action":"","product_name":"IBM DataStage on Cloud Pak for Data","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organisations running IBM DataStage 5.4.0.0 on Cloud Pak for Data, where authenticated users can reach the affected functionality over the network. The sources do not say which features or configurations are required to trigger the flaw.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000721,"input_tokens":4522,"output_tokens":537,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':16A,19A '-81542':17A,20A '5.4.0.0':44B,73C 'allow':75C 'arbitrari':13A,61B,82C 'attack':79C 'authent':78C 'cloud':4A,24A,29B,40B,69C 'cloud-pak-for-data':28B 'could':74C 'cve':15A,18A 'data':7A,27A,32B,43B,72C 'datastag':2A,35B,38B,67C 'datastage':22A 'delet':12A,60B,81C 'due':84C 'file':14A,62B,83C 'flaw':49B 'for':26A 'ibm':1A,21A,34B,37B,66C 'ibm-datastag':33B 'let':10A 'log':52B 'logged-in':51B 'on':23A 'pak':5A,25A,30B,41B,70C 'path':8A,47B,86C 'remot':54B,77C 'server':65B 'travers':9A,48B,87C 'use':57B 'user':11A,55B 'vendor':36B","nicknames":[],"mitigations":[],"who_affected":"Organisations running IBM DataStage 5.4.0.0 on Cloud Pak for Data, where authenticated users can reach the affected functionality over the network. The sources do not say which features or configurations are required to trigger the flaw.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["datastageoncloudpakfordata","ibmdatastageoncloudpakfordata"],"ptokens":["cloud","data","datastage","for","ibm","on","pak"],"labels":["cloudpakfordata","ibmdatastage","medium","vendor"],"campaign_type":null,"search_a":"'-2026':16A,19A '-81542':17A,20A 'arbitrari':13A 'cloud':4A,24A 'cve':15A,18A 'data':7A,27A 'datastag':2A 'datastage':22A 'delet':12A 'file':14A 'for':26A 'ibm':1A,21A 'let':10A 'on':23A 'pak':5A,25A 'path':8A 'travers':9A 'user':11A","search_b":"'5.4.0.0':44B 'arbitrari':61B 'cloud':29B,40B 'cloud-pak-for-data':28B 'data':32B,43B 'datastag':35B,38B 'delet':60B 'file':62B 'flaw':49B 'ibm':34B,37B 'ibm-datastag':33B 'log':52B 'logged-in':51B 'pak':30B,41B 'path':47B 'remot':54B 'server':65B 'travers':48B 'use':57B 'user':55B 'vendor':36B","search_c":"'5.4.0.0':73C 'allow':75C 'arbitrari':82C 'attack':79C 'authent':78C 'cloud':69C 'could':74C 'data':72C 'datastag':67C 'delet':81C 'due':84C 'file':83C 'ibm':66C 'pak':70C 'path':86C 'remot':77C 'travers':87C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T19:17:41+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-81542","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81542","severity":null,"published_at":"2026-11-08T19:17:41+00:00","modified_at":"2026-11-08T19:17:41+00:00","first_seen_at":"2026-11-08T19:22:34+00:00","fetched_at":"2026-11-08T19:22:34+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}