Advisory · CVE-2026-114464
IBM Process Mining lets nearby attackers reach sensitive information
IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control, rated critical at CVSS 9.3.
- Vendor
- IBM
- Product
- Process Mining
- Identifier / CWE
- CVE-2026-114464
CWE-284 - Action timing
- Immediate
Explain it like I’m five
Process Mining keeps business process data behind access controls. A flaw in those controls lets an attacker on the same local network reach sensitive information they were never granted.
- 01Adjacent network access
An attacker reaches the deployment from an adjacent network.
- 02Access control bypassed
The improper access control check is circumvented.
- 03Sensitive data read
Information the attacker was not granted is disclosed.
What happened
IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control. The record rates it critical at CVSS 9.3 under version 3.1, with adjacent network attack vector, low complexity, no privileges required, and no user interaction.
IBM’s bulletin lists the affected versions and the fix. Adjacent network reach still counts as remote exposure in most enterprise networks.
What to do
- Inventory Process Mining deployments and record each version.
- Check the IBM bulletin for the fix and apply it.
- Restrict network access to the deployment to trusted sources where possible.
- Review access logs for unauthorized reads.
- Verify the deployed version after updating.
Management note
Adjacent network is one hop away in most offices. Treat the exposure as network-wide until the fix lands.