CVE-2025-36059

published 2026-01-20

CVE-2025-36059: IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix…

Priority P4 24 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I H A N

IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation could allow a local user with access to the container to execute OS system calls.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
ibm	business_automation_workflow	—	—
ibm	business_automation_workflow	—	—
ibm	business_automation_workflow	—	—
ibm	business_automation_workflow_containers	24.0.0 – 24.0.0 Interim Fix 006	—
ibm	business_automation_workflow_containers	24.0.1 – 24.0.1 Interim Fix 005	—
ibm	business_automation_workflow_containers	25.0.0 – 25.0.0 Interim Fix 002	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-250