CVE-2026-17491

Awaiting Analysis Awaiting Analysis - Queue

IBM i ChrootDirectory Security Bypass Vulnerability

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: IBM Corporation

Description

IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-16

Last Modified

2026-10-16

Generated

2026-10-17

AI Q&A

2026-10-17

EPSS Evaluated

N/A

NVD

CVE-2026-17491

EUVD

EUVD-2026-103137

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	i	7.6
IBM	i	7.5
IBM	i	7.4
IBM	i	7.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM i 7.3 to 7.6 allows a remote authenticated attacker to bypass security restrictions. It occurs due to improper enforcement of the ChrootDirectory configuration directive, which is meant to restrict file system access.

Impact Analysis

An attacker could exploit this to gain unauthorized access to restricted files or directories, potentially leading to data leakage or further system compromise. The impact includes low confidentiality and integrity loss with no availability impact.

Compliance Impact

The vulnerability allows remote authenticated attackers to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive. This could lead to unauthorized access to sensitive data, potentially violating compliance requirements for GDPR, HIPAA, and other regulations that mandate strict access controls and data protection measures.

Mitigation Strategies

Apply IBM i PTFs or updates addressing the ChrootDirectory configuration issue. Review and enforce proper ChrootDirectory settings in SSH configurations. Restrict remote authenticated access to only trusted users and systems.

Hi! I’m here to help you understand CVE-2026-17491. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70