CVE-2026-16725
MediumCVSS 6.5Summary
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.
Risk Assessment
An authenticated attacker can read arbitrary files from the system, including configuration files, keys, and credentials, potentially leading to further privilege escalation.
Recommendation
Update IBM Watson Speech Services Cartridge to the latest version containing the fix. Restrict service account privileges and monitor for unusual file access requests.
Other vulnerabilities in IBM Watson Speech Services Cartridge
See all- CVE-2026-19319Medium
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
- CVE-2026-17493High
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain an out-of-bounds read vulnerability. A remote attacker could exploit this to cause a denial of service.
- CVE-2026-82418Critical
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a use-after-free vulnerability that could allow a remote attacker to execute arbitrary code.
Original NVD description (English source)
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS