CVE-2025-13688 — DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment

CVE-2025-13688

DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment PUBLISHED

Description (CNA)

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the wrapped command component.

Affected (CNA)

Vendor / product	Versions
IBM / DataStage on Cloud Pak for Data	affected 5.1.2 through 5.3.0

CWE

CWE-78

References

https://www.ibm.com/support/pages/node/7262347

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.