ByteOS Network

CVE Vulnerability Details :

CVE-2025-36183

PUBLISHED

More Info Official Page

Assigner-ibm

Assigner Org ID-9a959283-ebb5-44b6-b705-dcc2bbced522

Published At-17 Feb, 2026 | 21:32

Updated At-17 Feb, 2026 | 21:33

▼CVE Numbering Authority (CNA)

Privileged User File Upload Vulnerability Leading to Limited Server-Side Execution affects watsonx.data

IBM watsonx.data 2.2 through 2.2.1 IBM Lakehouse could allow a privileged user to upload malicious files that could be executed server to modify limited files or data.

Affected Products

Vendor

IBM Corporation

Product

watsonx.data

CPEs

cpe:2.3:a:ibm:watsonxdata:2.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:watsonxdata:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:watsonxdata:2.2.1:*:*:*:*:*:*:*

Versions

Affected

From 2.2 through 2.2.1 (semver)

Problem Types

Type	CWE ID	Description
CWE	CWE-434	CWE-434 Unrestricted Upload of File with Dangerous Type

Type: CWE

CWE ID: CWE-434

Description: CWE-434 Unrestricted Upload of File with Dangerous Type

Metrics

Version	Base score	Base severity	Vector
3.1	3.8	LOW	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

Version: 3.1

Base score: 3.8

Base severity: LOW

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

Solutions

The product needs to be installed or upgraded to the latest available level watsonx.data 2.2.2 or watsonx.data on CPD 5.2.2. Installation/upgrade instructions can be found here: https://www.ibm.com/docs/en/watsonx/watsonxdata/5.2.x?topic=deployment-installing .

References

Hyperlink	Resource
https://www.ibm.com/support/pages/node/7260118	vendor-advisory patch

Hyperlink: https://www.ibm.com/support/pages/node/7260118

Resource:

vendor-advisory

patch

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References