The vulnerability in IBM WebSphere Application Server Liberty arises from the deserialization of untrusted data in the batchManagement-1.0 feature. An unauthenticated remote attacker can exploit the flaw to corrupt the persisted status of batch job instances, leading to inaccurate job tracking or unintended job execution. The underlying weakness is a deserialization flaw (CWE-502).

Affected systems include IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 when the batchManagement-1.0 feature is enabled. All installations in that version range running the feature are susceptible to the deserialization flaw.

The CVSS score of 8.2 indicates a high severity vulnerability, while the EPSS score of less than 1% suggests a low likelihood of exploitation based on current threat intelligence. The flaw is not listed in the CISA KEV catalog, so no widespread exploitation is recorded. Nevertheless, an unauthenticated remote attacker with network access to the Liberty server can send crafted serialized data to the batchManagement-1.0 API and potentially corrupt job statuses. Because the flaw requires the batchManagement-1.0 feature to be enabled, the scope is limited to installations using that feature, but the impact on job processing could have significant business consequences.