Elevated Privilege Vulnerability in IBM Backup, Recovery and Media Services
CVE-2025-33108
What is CVE-2025-33108?
A security vulnerability in IBM Backup, Recovery, and Media Services for versions 7.4 and 7.5 may permit users with permissions to compile or restore programs to exploit unqualified library calls. This could allow unauthorized execution of user-controlled code with component access to the underlying host operating system, posing a risk of unauthorized data access or system manipulation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Backup Recovery and Media Services for i 7.4
Backup Recovery and Media Services for i 7.5
News Articles
IBM Backup Services Flaw Allows Hackers to Gain Elevated Access
A critical security vulnerability has been identified in IBM’s Backup, Recovery, and Media Services (BRMS) for IBM i, potentially exposing enterprise environments to privilege escalation attacks.
References
CVSS V3.1
Timeline
- đź“°
First article discovered by GBHackers News
Vulnerability published