What's new and changed in Watson Machine Learning

IBM Software Hub Version 5.4.0

A new version of Watson Machine Learning was released in June 2026 with IBM Software Hub 5.4.0.

Operand version: 5.4.0

This release includes the following changes:

New features

This release of Watson Machine Learning includes the following features:

New job operator role for deployment spaces

You can now assign the job operator role to collaborators in deployment spaces. This new role is designed for production environments where you need to delegate job execution and scheduling responsibilities without granting full editing privileges.

The new job operator role is available when adding collaborators to deployment spaces. Job operators can manage job runs while maintaining the integrity of job definitions and assets. When a job operator runs a job, the job executes with the privileges of an editor or admin who has job permissions delegated to them in the deployment space.

By using the job operator role, you can achieve the following benefits:

• Enhanced security: Separate job execution responsibilities from asset modification privileges

• Production readiness: Enable operations teams to manage job runs without risking changes to production assets

• Flexible delegation: Allow editors and admins to delegate routine job management tasks while maintaining control over definitions

• Audit compliance: Maintain clear separation of duties for regulated environments

Scale your AI workloads with asynchronous execution

You can now run AI functions and AI services asynchronously to improve performance and scalability for I/O-bound tasks.

When you define async generator functions, the runtime automatically detects and executes them concurrently, enabling external API calls, file I/O, and parallel async tasks.

For AI services, all three methods—generate(), generate_stream(), and generate_batch()—support asynchronous execution for fully async request handling, streaming responses, and batch jobs. The runtime automatically detects whether your function or service is synchronous or asynchronous, so you can adopt async patterns without changing your deployment process.

Deploy ML models with the new onnxruntime_opset_21 software specification

You can now deploy machine learning models with the new onnxruntime_opset_21 software specification. The specification provides enhanced performance and compatibility with the latest ONNX model formats.

Configure runtime-specific ephemeral storage to ensure predictable scheduling and safer capacity planning

You can now configure ephemeral storage requests and limits for each runtime type in AutoAI. By setting these values in the WmlBase custom resource, you prevent runtime pods from being evicted when disk space runs low and ensure that workloads have the temporary storage they need for model downloads, scratch data, and logs.

For more information, see Configuring ephemeral storage for runtime definitions.

New features from 5.3.1 patches

This release of Watson Machine Learning includes the following features that were introduced in IBM Software Hub Version 5.3.1 patches:

Deploy machine learning models exported to ONNX 1.17

From release 5.3.1, patch 2, you can deploy machine learning models that were exported to the ONNX 1.17 format.

Updates

The following updates were introduced in this release:

Removal of software specifications that are based on Runtime 24.1

All software specifications that are based on Runtime 24.1 are now removed. If you have any assets that use the old software specifications, you must recreate them by using the latest corresponding software specifications.

Customer-reported issues fixed in this release

For a list of customer-reported issues that were fixed in this release, see the Fix List for IBM Cloud Pak for Data on the IBM Support website.

Security issues fixed in this release

The following security issues were fixed in this release:

CVE-2026-46680, CVE-2026-45571, CVE-2026-45570, CVE-2026-44899, CVE-2026-44898, CVE-2026-44897, CVE-2026-44896, CVE-2026-44708, CVE-2026-44248, CVE-2026-44244, CVE-2026-44243, CVE-2026-43870, CVE-2026-43869, CVE-2026-43868, CVE-2026-42586, CVE-2026-42582, CVE-2026-42577, CVE-2026-42561, CVE-2026-42499, CVE-2026-42440, CVE-2026-42311, CVE-2026-42310, CVE-2026-42309, CVE-2026-42306, CVE-2026-42284, CVE-2026-42215, CVE-2026-42027, CVE-2026-41988, CVE-2026-41607, CVE-2026-41606, CVE-2026-41605, CVE-2026-41604, CVE-2026-41603, CVE-2026-41602, CVE-2026-41568, CVE-2026-41567, CVE-2026-41324, CVE-2026-41182, CVE-2026-41066, CVE-2026-40682, CVE-2026-40447, CVE-2026-40347, CVE-2026-40192, CVE-2026-39882, CVE-2026-39836, CVE-2026-39826, CVE-2026-39825, CVE-2026-39823, CVE-2026-39820, CVE-2026-39378, CVE-2026-39377, CVE-2026-35535, CVE-2026-35469, CVE-2026-35414, CVE-2026-35388, CVE-2026-35387, CVE-2026-35386, CVE-2026-35385, CVE-2026-34040, CVE-2026-33997, CVE-2026-33871, CVE-2026-33870, CVE-2026-33814, CVE-2026-33811, CVE-2026-33810, CVE-2026-33750, CVE-2026-33699, CVE-2026-33672, CVE-2026-33671, CVE-2026-33412, CVE-2026-33123, CVE-2026-33079, CVE-2026-32829, CVE-2026-32289, CVE-2026-32288, CVE-2026-32285, CVE-2026-32283, CVE-2026-32282, CVE-2026-32281, CVE-2026-32280, CVE-2026-32274, CVE-2026-31988, CVE-2026-31826, CVE-2026-28804, CVE-2026-28421, CVE-2026-28417, CVE-2026-28351, CVE-2026-28277, CVE-2026-27888, CVE-2026-27794, CVE-2026-27628, CVE-2026-27459, CVE-2026-27448, CVE-2026-27205, CVE-2026-27199, CVE-2026-27142, CVE-2026-27139, CVE-2026-27135, CVE-2026-27026, CVE-2026-27025, CVE-2026-27024, CVE-2026-26007, CVE-2026-25990, CVE-2026-25749, CVE-2026-25727, CVE-2026-25679, CVE-2026-24688, CVE-2026-24308, CVE-2026-24281, CVE-2026-24051, CVE-2026-23868, CVE-2026-22796, CVE-2026-22795, CVE-2026-22691, CVE-2026-22690, CVE-2026-21883, CVE-2026-21860, CVE-2026-7009, CVE-2026-6846, CVE-2026-5795, CVE-2026-5121, CVE-2026-5119, CVE-2026-4878, CVE-2026-4775, CVE-2026-4424, CVE-2026-4111, CVE-2026-3497, CVE-2026-3085, CVE-2026-3083, CVE-2026-3082, CVE-2026-2923, CVE-2026-2922, CVE-2026-2921, CVE-2026-2920, CVE-2026-2332, CVE-2026-1605, CVE-2026-1462, CVE-2026-1299, CVE-2026-1260, CVE-2026-0915, CVE-2026-0861

CVE-2025-71176, CVE-2025-69534, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2025-69418, CVE-2025-68161, CVE-2025-68160, CVE-2025-68121, CVE-2025-67721, CVE-2025-66221, CVE-2025-66019, CVE-2025-62708, CVE-2025-62707, CVE-2025-61730, CVE-2025-61729, CVE-2025-61728, CVE-2025-61727, CVE-2025-61726, CVE-2025-61725, CVE-2025-61724, CVE-2025-61723, CVE-2025-58189, CVE-2025-58188, CVE-2025-58187, CVE-2025-58186, CVE-2025-58185, CVE-2025-58183, CVE-2025-58160, CVE-2025-56648, CVE-2025-55197, CVE-2025-53605, CVE-2025-50537, CVE-2025-48431, CVE-2025-48386, CVE-2025-47912, CVE-2025-47907, CVE-2025-47906, CVE-2025-32728, CVE-2025-30167, CVE-2025-29923, CVE-2025-29087, CVE-2025-15467, CVE-2025-15367, CVE-2025-15366, CVE-2025-15281, CVE-2025-14831, CVE-2025-14819, CVE-2025-14104, CVE-2025-12060, CVE-2025-12058, CVE-2025-11143, CVE-2025-11083, CVE-2025-10158, CVE-2025-9906, CVE-2025-9820, CVE-2025-8747, CVE-2025-7707, CVE-2025-7647, CVE-2025-7458, CVE-2025-6176, CVE-2025-4574, CVE-2025-4565, CVE-2025-4432, CVE-2025-3933, CVE-2025-3777, CVE-2025-3264, CVE-2025-3263, CVE-2025-2099, CVE-2025-1550, CVE-2025-1194

CVE-2024-55459, CVE-2024-31583, CVE-2024-31580, CVE-2024-12720, CVE-2024-12224, CVE-2024-11394, CVE-2024-11393, CVE-2024-11392, CVE-2024-8019, CVE-2024-5187, CVE-2024-3568

CVE-2023-51767, CVE-2023-46250, CVE-2023-40403, CVE-2023-36810, CVE-2023-36807, CVE-2023-2976

CVE-2020-8908

CVE-2018-10237

Deprecated features

The following features were deprecated in this release:

Deprecation of do_20.1 software specification for Decision Optimization

The do_20.1 software specification for Decision Optimization is deprecated and will be removed in a future release. If you have any assets that use the deprecated software specification, migrate them to the latest corresponding software specification.

The following features were deprecated in patches for release 5.3.1:

Software specifications that are based on Apache Spark 3.4 are deprecated

Software specifications that are based on Apache Spark 3.4 are deprecated since release 5.3.1, patch 2 and will be removed in a future release. To avoid disruption, migrate existing deployments that use Apache Spark 3.4 to Apache Spark 3.5.