Directory Traversal Vulnerability in IBM Storage Scale
CVE-2026-14437

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Storage Scale Container Native And Csi
Vendor
CVE Published:
8 November 2026

What is CVE-2026-14437?

A vulnerability exists in IBM Storage Scale (versions 5.2.3.0 through 5.2.3.9 and 6.0.1.0) that allows a remote attacker to execute directory traversal attacks. By sending a carefully crafted URL request that exploits 'dot dot' sequences (/../), an attacker may gain unauthorized access to arbitrary files on the system, potentially compromising sensitive data. It’s crucial for users to apply the recommended patches to safeguard their systems against this exposure.

Affected Version(s)

Storage Scale Container Native and CSI 6.0.1.0

Storage Scale Container Native and CSI 5.2.3.0 <= 5.2.3.9

References

https://www.ibm.com/support/pages/node/7291295
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.