CVE-2026-49483

Received Received - Intake

IBM i Code Extension Component Integrity Flaw

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: GitHub, Inc.

Description

Code for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, IBMi components implementing IBMiComponent were accepted after checking that a procedure existed without reliably verifying component integrity. Components installed with broad public permissions allow another local account to alter a program such as GETMBRINFO. A later connection can execute the altered program under the connecting account because the LONG_COMMENT marker alone does not establish integrity. This issue is fixed in version 3.0.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-49483

Affected Vendors & Products

Vendor	Product	Version / Range
codefori	vscode-ibmi	< 3.0.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-732	The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
CWE-345	The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

Executive Summary

This vulnerability affects the IBMi extension for Visual Studio Code. Before version 3.0.1, the extension did not properly verify the integrity of components installed with broad public permissions. This allowed local users to modify programs like GETMBRINFO. Later, when the modified program was executed, it ran under the connecting account, bypassing intended restrictions.

Detection Guidance

Check the version of the IBMi extension in Visual Studio Code. If it is below 3.0.1, the system is vulnerable. Look for components installed with broad public permissions that could allow alteration of programs like GETMBRINFO.

Impact Analysis

An attacker with local access could alter programs in the IBMi extension, potentially leading to unauthorized code execution. This could allow them to access sensitive data, escalate privileges, or disrupt operations on the IBMi system.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating confidentiality requirements in GDPR and HIPAA. Organizations using the vulnerable extension may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Update the IBMi extension to version 3.0.1 or later. Review and restrict permissions for installed components to prevent unauthorized alterations. Remove or secure any components with excessive public permissions.

Hi! I’m here to help you understand CVE-2026-49483. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70