IBM i CVE-2026-17499

The attacker must possess a valid local account on the IBM i system with at least low-level interactive access (PR:L per CVSS vector). The vulnerability is strictly local (AV:L) - remote unauthenticated exploitation is not possible; an attacker must first authenticate to the IBM i system and establish a local session. No specific non-default configuration, feature flag, or application module is identified in available data as a required precondition beyond having a low-privileged local account. Exploitation is limited by: the mandatory local access requirement, the non-automatable nature confirmed by SSVC, the absence of any known public exploit, and the availability of a vendor patch. The specific IBM i component or subsystem vulnerable to injection is not named in available data.

The CVSS 7.8 score (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) accurately captures a local, low-privilege, low-complexity attack yielding full CIA impact. However, the local attack vector (AV:L) is the primary limiting factor - the attacker must already hold a valid local session on the IBM i system, significantly reducing the exposed attack surface compared to network-reachable vulnerabilities. EPSS at 0.11% (1st percentile) reflects the absence of observed exploitation activity in the wild, and CISA SSVC rates exploitation as 'none' with automatable as 'no', reinforcing that this is not a target of active or commodity exploitation. One notable tension: SSVC rates technical impact as 'partial', which conflicts with the CVSS C:H/I:H/A:H (effectively 'total') - this discrepancy is not resolved by available data and should be verified with IBM's advisory detail. KEV status is absent. Net assessment: real-world priority is moderate - high potential severity if an attacker already has local access, but the requirement for an existing local account and the absence of any exploitation evidence deprioritize this below network-exposed criticals.

A low-privileged user with an existing local IBM i account submits crafted input containing OS metacharacters (e.g., a semicolons or pipe sequence) to a vulnerable IBM i command-processing component. The application fails to sanitize the input before passing it to an OS command execution function, causing the injected commands to run with elevated system privileges. No public proof-of-concept code has been identified, and SSVC confirms the attack is not automatable, indicating targeted manual exploitation rather than scripted mass attacks.