CVE-2025-36335 is a vulnerability in IBM watsonx.data intelligence versions 5.2.0 through 5.3.1 where user credentials are stored in plaintext on the local system. This allows any local user with access to the system to read these credentials without needing privileges or user interaction. The vulnerability is classified under CWE-256, indicating plaintext storage of passwords. The CVSS v3.1 base score is 6.2, with attack vector local, low attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality impact. No official remediation or patch has been documented by IBM as of the published date.

The vulnerability exposes user credentials stored in plaintext, allowing local users to obtain sensitive password information. This compromises confidentiality but does not affect integrity or availability of the system. Exploitation requires local access to the affected system. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for unauthorized access. Avoid storing sensitive credentials on affected versions if possible.