IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a vulnerability that permits a remote authenticated attacker to read namespace‑wide secrets exposed through accessible file mounts, resulting in the disclosure of sensitive configuration data and credentials. The flaw directly compromises confidentiality and can undermine the security posture of an entire environment by revealing secrets that may be used for further attacks.

The affected product is IBM DataStage on Cloud Pak for Data version 5.4.0.0. The vendor’s guidance recommends upgrading to patch 5.4‑7 or later to remediate the issue.

The vulnerability has a high CVSS score of 8.8; no EPSS data are available, and it is not listed in the CISA KEV catalog. Because the flaw requires a remote authenticated session and the presence of accessible file mounts, an attacker with valid credentials can exploit it directly. The high severity score reflects the potential widespread impact on confidentiality if the secrets are compromised.