CVE-2026-16725

Watson Speech tracing could expose local files

IBM · Watson Speech Services Cartridge / LangSmith tracing

First documented disclosure · Review checkpoint

Summary

An authenticated request to the speech service could expose a local file through a LangSmith trace attachment.

Severity and exploitation evidence

Medium · 6.5/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed public disclosures do not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The tracing middleware accepted a file reference without keeping its resolution inside the intended directory.

Conditions required

The caller has network access and valid low-privilege credentials for an affected service. The file must be readable by the runtime.

Potential impact

Local file contents could be transferred to the tracing system. IBM rates the confidentiality impact high.

Affected versions and configurations

4.0.0 through 5.4.0, per IBM.

Fix and mitigation status

5.4.0 Patch 8.

Practical next steps

Apply IBM’s 5.4.0 Patch 8 to the affected deployment. Check access to stored traces if attachments may have contained sensitive data.

Operating lesson

Treat paths accepted by observability middleware as privileged file access.

Evidence and limits

IBM published the bulletin October 22 and the CVE record November 4. The November 8 supplemental assessment adds no new vendor fix.

Sources