Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "2.7",
  "pubDate": "2026-08-13T21:17:41.130Z",
  "pubdate": "2026-08-13T21:17:41.130Z",
  "executiveSummary": "This vulnerability is classified as a path traversal flaw affecting IBM i versions 7.6, 7.5, 7.4, and 7.3. The vulnerability allows a remote authenticated attacker to perform unauthorized file manipulation operations within the affected operating system environment.\nThe risk implications involve the potential compromise of file integrity and unauthorized modification or placement of system files, depending on the file system permissions associated with the authenticated user context. Exploitation of this vulnerability requires the attacker to possess valid authentication credentials to interact with the vulnerable components.\nThe attack vector involves manipulating input parameters that process file paths, enabling directory traversal sequences to access or modify locations outside the intended scope. Organizations utilizing the affected IBM i versions face potential risks to data integrity and unauthorized file system access if remediation measures are not applied.",
  "technicalDetails": "The vulnerability stems from insufficient validation and sanitization of user-supplied input utilized in file path construction within IBM i versions 7.6, 7.5, 7.4, and 7.3. Specifically, the application or underlying service fails to adequately filter directory traversal sequences such as dot-dot-slash (../) patterns.\nExploitation requires the attacker to be remotely authenticated to the target system. Upon successful authentication, the attacker submits crafted requests containing malicious path traversal sequences to the vulnerable component responsible for file handling and processing.\nThe attack flow proceeds as follows: First, the authenticated attacker crafts an input payload incorporating directory traversal characters designed to escape the designated working directory or base path. Second, the vulnerable component processes the unsanitized input directly within file system operations without verifying whether the resulting absolute path resides within the authorized boundary. Third, the system executes the file manipulation instruction against the target file path specified by the traversal payload.\nThe affected versions comprise IBM i 7.6, 7.5, 7.4, and 7.3. The vulnerability involves components handling file input, storage, or processing where file paths are dynamically resolved based on user input. Post-exploitation impact includes unauthorized file creation, modification, or deletion within the file system confines accessible to the privileges of the authenticated session, potentially leading to operational disruption or data corruption."
}