CVE-2025-36145: IBM Watsonx.data

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions.

Affected products

• IBM Watsonx.data: from 2.2.0, up to and including 2.3.1

Published 2026-05-26. Last modified 2026-07-24.