IBM WatsonX Orchestrate Cartridge for Cloud Pak for Data versions 4.8.4 through 4.8.5 and 5.0.0 through 5.4.2 have a vulnerability (CVE-2026-2477) that allows low-privileged users to bypass UI-level access restrictions and execute privileged functions. This is due to the failure to enforce backend authorization checks, potentially enabling unauthorized access to administrative API endpoints.