CVE-2026-84421

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to arbitrary code execution due to improper validation of paths during the extraction of archives, allowing remote authenticated attackers to exploit this flaw. Organizations utilizing this version of the software should prioritize immediate patching to mitigate potential risks of unauthorized access and system compromise. Security teams and system administrators should assess their environments for this vulnerability to protect sensitive data and maintain system integrity.