CVE-2026-82103: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor in IBM DataStage on Cloud Pak for Data

CVE-2026-82103 is a vulnerability in IBM DataStage on Cloud Pak for Data 5.4.0.0 where a remote attacker with valid authentication can obtain sensitive information due to improper access controls. The vulnerability is categorized as CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). The CVSS 3.1 base score is 9.6, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality and integrity. No known exploits are reported in the wild as of the published date.

An attacker with valid credentials can remotely access sensitive information that should be protected, potentially leading to data breaches affecting confidentiality and integrity of the system. There is no reported impact on system availability. The critical CVSS score reflects the severity of unauthorized data exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is not a cloud service, remediation depends on IBM releasing an official fix. Until then, restrict access to authorized users only and monitor for suspicious activity related to sensitive data access.