CVE-2025-36180 affects IBM watsonx.data versions 2.2 through 2.3, specifically the IBM Lakehouse component. The vulnerability arises from improper restriction of communication channels between pods, potentially allowing unauthorized data transfer between pods. This is classified under CWE-923. The CVSS v3.1 base score is 5.3, with attack vector as adjacent network, high attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

The vulnerability could allow an attacker to transfer data between pods without restrictions, potentially compromising data integrity within the affected environment. There is no confidentiality or availability impact indicated. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published by IBM, users should monitor IBM advisories for updates. Until a fix is available, consider restricting pod communication through network policies or other controls as a precautionary measure.