IBM Cloud Pak System 2.3.5.0 contains a vulnerability (CVE-2026-13463) involving the use of hard-coded credentials that are written into log files. This exposure allows a local attacker to retrieve sensitive credential information from the logs. The CVSS 3.1 base score is 7.5, reflecting high impact on confidentiality with no impact on integrity or availability. The vulnerability is documented under CWE-798. There is no vendor advisory or patch available at this time, and the product is not a cloud service, so remediation is the responsibility of the user.

An attacker with local access to the affected system can obtain sensitive credentials from log files, potentially leading to unauthorized access or further compromise. The confidentiality impact is high, but integrity and availability are not affected. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to the system and protect log files to prevent unauthorized reading of sensitive information.