NFS Version Restriction Bypass in IBM i Systems
CVE-2026-17068

5.4MEDIUM

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
16 October 2026

What is CVE-2026-17068?

IBM i versions 7.3, 7.4, 7.5, and 7.6 are exposed to a vulnerability that allows a local attacker to bypass network file system (NFS) version restrictions. This is due to improper handling of the export version flag, which could lead to unintended access to the system's resources. Organizations using these IBM i versions should evaluate their security posture and apply relevant patches to mitigate the risk.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7292423
vendor-advisorypatch

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.