CVE-2026-17071

Received Received - Intake

Path Traversal Vulnerability in IBM i

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-13

Generated

2026-08-14

AI Q&A

2026-08-14

EPSS Evaluated

N/A

NVD

CVE-2026-17071

EUVD

EUVD-2026-58392

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.6
ibm	i	7.5
ibm	i	7.4
ibm	i	7.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM i 7.6, 7.5, 7.4, and 7.3 allows a remote authenticated attacker to manipulate files through path traversal. This means an attacker could access or modify files outside the intended directory structure.

Impact Analysis

An attacker could alter or delete critical files, leading to data corruption, unauthorized access, or system instability. This could disrupt operations or expose sensitive information if combined with other vulnerabilities.

Compliance Impact

This vulnerability could lead to unauthorized file access or modification, potentially violating data integrity and confidentiality requirements in GDPR and HIPAA. Compliance may be compromised if sensitive data is exposed or altered.

Mitigation Strategies

Apply IBM i PTFs or updates to address the path traversal vulnerability. Restrict remote authenticated user access to only necessary permissions. Monitor file manipulation activities for suspicious behavior.

Hi! I’m here to help you understand CVE-2026-17071. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70