VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 3, 2026· Updated Mar 3, 2026

DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment

CVE-2025-13687

Description

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the user-defined function component.

Affected products

2
  • IBM/DataStage on Cloud Pak for Datav5
    cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.1.2:*:*:*:*:*:*:*
    Range: 5.1.2
  • IBM/DataStage on Cloud Pak for Datallm-fuzzy
    Range: >=5.1.2 <=5.3.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.