CVE-2026-17424

Received Received - Intake

Path Traversal Vulnerability in IBM AIX and PowerVM VIOS

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: IBM Corporation

Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions due to improper limitation of a pathname to a restricted directory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-20

Last Modified

2026-08-20

Generated

2026-08-21

AI Q&A

2026-08-21

EPSS Evaluated

N/A

NVD

CVE-2026-17424

EUVD

EUVD-2026-63735

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	aix	From 7.2 (inc)
ibm	aix	From 7.3 (inc)
ibm	powervm_vios	From 4.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a vulnerability where a remote attacker could bypass security restrictions. This happens because the software improperly limits file paths to restricted directories, allowing unauthorized access.

Impact Analysis

This vulnerability could allow attackers to access restricted files or directories remotely. This may lead to unauthorized data exposure, modification, or other malicious activities depending on the system configuration.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating compliance requirements like GDPR or HIPAA. Organizations may face legal penalties or reputational damage if exploited.

Mitigation Strategies

Apply IBM AIX and PowerVM VIOS security patches or updates as soon as they become available to address the pathname restriction bypass issue.

Hi! I’m here to help you understand CVE-2026-17424. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70