# CVE-2025-14754

Authenticated privilege escalation allowing arbitrary command execution in IBM Cloud Pak for Data.

- Page: https://www.vulneraibility.com/cve/CVE-2025-14754
- CVSS: 8.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.66% (percentile 51.9)
- CISA SSVC: exploitation none, automatable no, technical impact total (assessed 2026-09-18)
- Weakness: CWE-78
- Published: 2026-09-18

## Affected versions

- IBM Cloud Pak for Data: affected 5.1.2

A version outside these ranges is not a statement that it is unaffected.

## Impact

An authenticated user can execute arbitrary commands with elevated privileges, enabling full system compromise, data access, and lateral movement.

## Action

Immediate action required

## Recommendation

Apply vendor patch/mitigations ASAP; restrict access, audit credentials and logs.

## References

- [patch] https://www.ibm.com/support/pages/node/7287142

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.