CVE-2026-12742

IBM Business Automation Workflow containers and traditional deployments are vulnerable to unauthorized import actions due to insufficient authorization controls. An authenticated attacker could exploit this weakness to perform restricted operations, potentially compromising the integrity of the workflow environment. Organizations using these IBM products should prioritize addressing this vulnerability to mitigate the risk of unauthorized access and data manipulation.