PT-2026-3586 · Ibm · Ibm Business Automation Workflow

Published 2026-01-20 · Updated 2026-02-17 · CVE-2025-36059

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Business Automation Workflow containers versions 24.0.0 through 24.0.0 Interim Fix 006 IBM Business Automation Workflow containers versions 24.0.1 through 24.0.1 Interim Fix 005 IBM Business Automation Workflow containers versions 25.0.0 through 25.0.0 Interim Fix 002

Description A local user with access to the container may be able to execute OS system calls.

Recommendations Update IBM Business Automation Workflow containers to a version after 24.0.0 Interim Fix 006. Update IBM Business Automation Workflow containers to a version after 24.0.1 Interim Fix 005. Update IBM Business Automation Workflow containers to a version after 25.0.0 Interim Fix 002.

Fix

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2025-36059

Affected Products

Ibm Business Automation Workflow

References · 7

• https://osv.dev/vulnerability/CVE-2025-36059 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36059 · Security Note
• https://twitter.com/VulmonFeeds/status/2013759475560194052 · Twitter Post
• https://ibm.com/support/pages/node/7256777 · Patch, Vendor Advisory
• https://twitter.com/vuldb/status/2013738579734995388 · Twitter Post
• https://t.me/cveNotify/152212 · Telegram Post
• https://twitter.com/CVEnew/status/2013641579433517484 · Twitter Post