Medium severity6.5NVD Advisory· Published Nov 8, 2026· Updated Nov 8, 2026
CVE-2026-2477
CVE-2026-2477
Description
IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 fails to enforce backend authorization checks, allowing low‑privileged users to directly invoke administrative API endpoints. This bypasses UI‑level access restrictions and may lead to unauthorized execution of privileged functions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 4.8.4 - 4.8.5, 5.0.0 - 5.4.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.