IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.

Üreticinin çözüm notu (İngilizce)

Product(s)Version(s)Remediation/Fix/InstructionsIBM Watson Speech Services Cartridge5.4.0 Patch 8 The fix in 5.4.0 Patch 8 applies to all versions listed (4.0.0-5.4.0). The newest version of 5.4.0 with the included Patch 8 can be downloaded and installed from:
https://www.ibm.com/docs/en/cloud-paks/cp-data/5.4.x

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• ibm.com/support/pages/node/7293534 Yama

Kayıt geçmişi

1. 5 Kas 2026 00:04Yayımlandı

İlgili açıklar

• 5,3 CVE-2026-19319IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in Onnx
• 9,8 CVE-2026-82418IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL
• 7,5 CVE-2026-17493IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker.
• 6,5 CVE-2026-57565Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)
• 8,6 CVE-2026-57567Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webview
• 6,2 CVE-2026-58128Alan: Health Insurance for Android 1.450.0 Path Traversal via ShareReceiverActivity