High severity · published Mar 3, 2026
CVE-2025-13687
DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the user-defined function component.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
DataStage on Cloud Pak for Data · IBM
5.1.2 through 5.3.0 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-13687
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-13687
Vendor Advisory
https://www.ibm.com/support/pages/node/7262347
More from DataStage on Cloud Pak for Data
10.0
CVE-2026-81212
DataStage on Cloud Pak for Data Improper Authorization
9.9
CVE-2026-82110
DataStage on Cloud Pak for Data Path Traversal
9.9
CVE-2026-16346
DataStage on Cloud Pak for Data has several vulnerabilities
9.6
CVE-2026-82101
DataStage on Cloud Pak for Data Path Traversal
9.6
CVE-2026-82107
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software