CVE-2026-17043

Analyzed Analyzed - Analysis Complete

Path Traversal Vulnerability in IBM i

Publication date: 2026-08-13

Last updated on: 2026-08-17

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-17

Generated

2026-09-03

AI Q&A

2026-08-14

EPSS Evaluated

2026-09-02

NVD

CVE-2026-17043

EUVD

EUVD-2026-58387

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	From 7.3 (inc) to 7.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM i versions 7.6, 7.5, 7.4, and 7.3 allows a remote authenticated attacker to delete arbitrary files on the system due to a path traversal flaw.

Detection Guidance

This vulnerability involves path traversal in IBM i systems allowing remote authenticated attackers to delete arbitrary files. Detection requires checking for unusual file deletions or unauthorized access patterns in system logs. Review IBM i job logs for suspicious activity and monitor for unexpected file system changes. No specific commands are provided in the given context.

Impact Analysis

An attacker could exploit this to delete critical files, disrupting system operations, causing data loss, or leading to denial of service.

Compliance Impact

This vulnerability could allow unauthorized file deletion, which may impact data integrity and availability. For GDPR, this could affect compliance with Article 32 (security of processing) and Article 5 (integrity and confidentiality). For HIPAA, it may violate the Security Rule's integrity and availability requirements.

Mitigation Strategies

Apply IBM i PTFs or updates to address the path traversal vulnerability. Restrict remote authenticated user access to only necessary permissions and monitor for unusual file deletion activities.

Hi! I’m here to help you understand CVE-2026-17043. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70