CVE-2026-82102 · Vendor
NO FIX YET
IBM DataStage on Cloud Pak for Data 5.4.0.0 has a server-side request forgery flaw. A logged-in attacker can make the server send requests on their behalf and obtain sensitive information.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams that run IBM DataStage on Cloud Pak for Data version 5.4.0.0 are affected. The attacker needs an authenticated account on the platform. Sources do not describe the fixed version or the exact feature that triggers the flaw.
Not affected if no-authenticated-access, other-versions
Who cares cloud-pak-for-data, ibm-datastage
5.4.0.0No fix yet, per the sources.
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery vulnerability.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.