Vulnerability · Published May 26, 2026 · Assigned by ibm

CVE-2025-36145Multiple Vulnerabilities in watsonx.data

Medium 5.4

In plain English

A medium-severity security flaw in watsonx.data from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).

Severity (CVSS 3.1)5.4Medium

Exploit odds (30 days)0.2%top 94.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions.

Affected products (as reported)

Vendor	Product	Versions
IBM	watsonx.data	2.2.0 – through 2.3.1

Weakness: CWE-923 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

References

https://www.ibm.com/support/pages/node/7272498 vendor-advisory, patch