CVE-2026-16725mediumCWE-22

CVE-2026-16725: medium-severity vulnerability in IBM Watson Speech Services Cartridge

IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith

Published

Follow this CVE+ Monitor Watson Speech Services Cartridge

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
IBM · Watson Speech Services Cartridge
Related CVEs — IBM Watson Speech Services Cartridge

In the same product, most dangerous first.

CVE-2026-19319MEDIUMIBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in OnnxEPSS —CVE-2026-82418CRITICALIBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSLEPSS —CVE-2026-17493HIGHIBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker.EPSS —