IBM Watsonx Vulnerability Enables SQL Injection Attacks

A critical vulnerability in the IBM Watsonx Orchestrate Cartridge for IBM Cloud Pak for Data has been disclosed, enabling blind SQL injection attacks that could compromise sensitive data. Tracked as CVE-2025-0165, the flaw allows authenticated attackers to inject malicious SQL statements, potentially leading to unauthorized data access, manipulation, or deletion in the back-end database. The vulnerability affects versions 4.8.4 through 4.8.5 and 5.0.0 through 5.2, with a CVSS v3.1 base score of 7.6.

According to IBM’s security bulletin released on 31 August 2025, the issue stems from improper neutralisation of special elements in SQL commands (CWE-89). Remediation guidance urges upgrading to watsonx Orchestrate Cartridge version 5.2.0.1, alongside backups, patch installation, testing in a controlled environment, and monitoring logs for anomalous SQL errors; organisations are also advised to deploy web application firewalls and enforce least-privilege access for database credentials.

The disclosure underscores the need for rigorous input validation in AI orchestration platforms and swift action to apply the patch to safeguard data assets and analytic workflows.