File Ownership Vulnerability in IBM i Product Line
CVE-2026-84414

7.8HIGH

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
29 September 2026

What is CVE-2026-84414?

An improper validation vulnerability in IBM i versions 7.6, 7.5, 7.4, and 7.3 allows local authenticated attackers to change the ownership of arbitrary files. This could lead to unauthorized access or manipulation of sensitive data, as attackers exploit the system's failure to adequately verify file paths controlled by the attacker. Prompt deployment of provided patches is essential to safeguard system integrity.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7289443
vendor-advisorypatch

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.