Medium severity4.3NVD Advisory· Published Nov 8, 2026· Updated Nov 8, 2026
CVE-2026-2700
CVE-2026-2700
Description
IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 allows low-privileged users to execute administrative functions by directly invoking backend APIs.As a result, UI-level access restrictions are ineffective, as the backend fails to enforce role-based access control.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 4.8.4 - 4.8.5, 5.0.0 - 5.4.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.