A remote authenticated attacker can exploit an improper limitation of pathnames within IBM DataStage on Cloud Pak for Data 5.4.0.0, enabling directory traversal. This flaw permits the attacker to access files outside the intended restricted directory, potentially exposing confidential configuration files or system data. The impact is primarily the unauthorized disclosure of sensitive data or configuration, and it may also facilitate further attacks if privileged files are reachable.

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is affected. Users running this specific build should be aware that the software is vulnerable until the issue is patched.

The CVSS score of 7.1 indicates a moderate to high severity, and the lack of EPSS data means the current exploitation probability is unknown. However, because the vulnerability requires authenticated access and is not listed in CISA’s KEV catalog, the risk is lower than a publicly exploitable flaw but still significant for environments where privileged users exist. The vulnerability can be leveraged by any authenticated user that has access to the DataStage API or web interface to craft a path that escapes the designated directory.