CVE-2026-84414
Received Received - Intake

IBM i Local File Ownership Change Vulnerability

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: IBM Corporation

Description
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-29
Last Modified
2026-09-29
Generated
2026-09-29
AI Q&A
2026-09-29
EPSS Evaluated
N/A
NVD
CVE-2026-84414
EUVD
EUVD-2026-89202

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
ibm ibm_i From 7.3 (inc) to 7.6 (inc)
ibm i 7.6
ibm i 7.5
ibm i 7.4
ibm i 7.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-732 The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in IBM i allows a local authenticated attacker to change ownership of arbitrary files due to improper validation of an attacker-controlled file path in the Network Authentication Service (NAS). It affects versions 7.3, 7.4, 7.5, and 7.6 of IBM i.

Impact Analysis

An attacker could exploit this to modify file ownership, potentially leading to unauthorized access, data tampering, or system disruption. The high CVSS score (7.8) indicates significant risk to confidentiality, integrity, and availability of affected systems.

Compliance Impact

This vulnerability could lead to unauthorized file access or modification, violating data integrity and confidentiality requirements in GDPR and HIPAA. Non-compliance risks include fines and legal penalties.

Mitigation Strategies

Apply the provided PTFs for your IBM i version: SJ11610 for 7.3, SJ11609 for 7.4, SJ11608 for 7.5, or SJ11607 for 7.6. If running an unsupported version, upgrade to a supported release immediately.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-84414. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart