CVE-2026-1248: IBM Business Automation Workflow

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages.

Affected products

• IBM Business Automation Workflow: version 24.0.0 only; version 24.0.1 only; version 25.0.0 only; version 25.0.1 only

Published 2026-05-27. Last modified 2026-06-17.