← CVE Radar
CVE-2026-16725IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.
6.5 MEDIUMEPSS 0.36%Not in KEVNVD: Undergoing Analysis
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.5 | MEDIUM | 3.1ibm (CNA) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Details
- CVE ID
- CVE-2026-16725
- Status
- Undergoing Analysis
- Assigner (CNA)
- ibm
- Published
- Nov 4, 2026
- Last modified
- 2026-11-08 02:16 UTC
- Weaknesses
- CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products
As published by the CNA in the CVE record.
IBMWatson Speech Services Cartridge1 version range
- 4.0.0 through 5.4.0