A critical vulnerability (CVE-2025-1837) has been identified in IBM Watsonx Orchestrate with Watsonx Assistant Cartridge, affecting versions 4.8.4 through 4.8.5 and 5.0.0 through 5.4.2. The vulnerability allows an authenticated user to perform unauthorized actions due to improper trust of server-side permission methods. This issue matters to developers and operators of AI agents that utilize Watsonx Orchestrate, as it enables a malicious actor to bypass security controls and potentially compromise the security and integrity of their AI systems.