CVE-2026-12759 describes a denial of service vulnerability in IBM Cloud Pak for Business Automation where an authenticated user can trigger uncontrolled resource consumption. This flaw is categorized under CWE-400 (Uncontrolled Resource Consumption). The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring low privileges and no user interaction, with impact limited to confidentiality (high) but no integrity or availability impact according to the vector, though the description states denial of service. No known exploits or patches are currently documented.

An authenticated user could exploit this vulnerability to cause denial of service by exhausting system resources, potentially disrupting availability of the IBM Cloud Pak for Business Automation service. There is no indication of impact on data integrity or confidentiality beyond what the CVSS vector suggests. No active exploitation is known at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or workaround information is provided, monitor official IBM advisories for updates. Limit authenticated user privileges as a precautionary measure until a fix is available.