CVE-2025-36180 affects IBM watsonx.data versions 2.2.0 through 2.3, specifically the IBM Lakehouse component. The vulnerability arises from improper restriction of communication channels between pods, potentially allowing unauthorized data transfer between pods. This is categorized as CWE-923. The CVSS 3.1 base score is 5.3, with attack vector as adjacent network, high attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No patch or official remediation level has been disclosed by IBM as of the publication date.

The vulnerability could allow an attacker to transfer data between pods without restrictions, potentially impacting data integrity within the affected environment. There is no reported impact on confidentiality or availability. The medium CVSS score reflects moderate risk due to the high attack complexity and the requirement for adjacent network access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official remediation level or patch links are provided, users should monitor IBM advisories for updates. Until a fix is available, limiting network access to pods and enforcing strict network segmentation may help reduce exposure, but these are general mitigations and not vendor-confirmed for this issue.