IBM watsonx Orchestrate Cartridge for Cloud Pak for Data versions 4.8.4 through 4.8.5 and 5.0.0 through 5.4.2 contains a vulnerability where backend authorization checks are not enforced. This allows low-privileged users to bypass UI-level restrictions and directly invoke administrative API endpoints, potentially executing privileged functions without proper authorization.