Act nowDisclosed

Advisory · CVE-2026-82418

Unauthenticated remote code execution in IBM Watson Speech Services Cartridge

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability. IBM rates it critical at CVSS 9.8.

Advisory published November 4, 2026Independent summary
Vendor
IBM
Product
Watson Speech Services Cartridge
Identifier / CWE
CVE-2026-82418
CWE-416
Action timing
Immediate
ELI5

Explain it like I’m five

The program keeps using a workspace after it has already been cleared away. An attacker from across the network can slip their own instructions into that cleared workspace and get the program to run them.

SIMPLIFIED_ATTACK_PATH04 STEPS
  1. 01Remote request

    An attacker who can reach the cartridge over the network sends a crafted request, with no authentication required.

  2. 02Memory reuse

    The request triggers a use-after-free flaw, where freed memory is accessed again while still holding attacker-influenced data.

  3. 03Code execution

    The attacker uses the corrupted memory state to execute arbitrary code in the context of the service.

  4. 04Service compromise

    Code execution inside the cartridge can expose speech workloads and data handled by the service.

What happened

IBM disclosed CVE-2026-82418 in Watson Speech Services Cartridge: versions 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability. IBM rates it critical at CVSS 3.1 9.8, with network access, low complexity, no privileges required, and no user interaction.

The NVD record carries IBM’s description and score. IBM’s bulletin adds the trigger: specially crafted PKCS#7 or S/MIME signed messages can trigger the use-after-free during PKCS#7 signature verification, via the cryptography wheels used by Speech runtimes.

Fix version per IBM: 5.4.0 Patch 8, which IBM states applies to all versions listed (4.0.0 through 5.4.0). IBM lists no workaround or mitigation.

What to do

  1. Inventory Watson Speech Services Cartridge deployments, including versions 4.0.0 through 5.4.0.
  2. Upgrade to IBM Watson Speech Services Cartridge 5.4.0 Patch 8, which IBM states applies to all versions listed (4.0.0 through 5.4.0).
  3. Restrict network access to the cartridge until patched, especially where it is reachable beyond trusted networks.
  4. Review service logs for unusual requests or crashes around speech workloads that could indicate exploitation attempts.
  5. Confirm the deployed version after patching.

Management note

This is an unauthenticated, network-reachable remote code execution flaw in an enterprise AI service, scored at the top of the critical range. The combination of no authentication and no user interaction makes it a patch-first item for any exposed deployment.