What is the CVSS score of EUVD-2026-57614?

EUVD-2026-57614 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of IBM i ACS are affected by EUVD-2026-57614?

IBM i Access Client Solutions (ACS) versions 1.1.2.0 through 1.1.9.13 contain a local privilege escalation vulnerability enabling any standard Windows user to execute arbitrary code in other users'…. A patch is available.

How to fix or mitigate EUVD-2026-57614?

Within 24 hours: asset teams must identify all Windows endpoints running ACS versions 1.1.2.0 through 1.1.9.13 installed in all-users mode; cross-reference with user privilege levels and data access classifications to prioritize higher-risk systems. Within 7 days: deploy the available vendor patch to all affected endpoints, prioritizing systems accessed by administrative or privileged users. Within 30 days: verify complete patch deployment via automated scanning and conduct forensic review of affected systems for evidence of privilege escalation exploitation or unauthorized code execution.

IBM i ACS EUVD-2026-57614

| CVE-2026-13094 HIGH

Code Injection (CWE-94)

2026-08-12 ibm

GHSA-xvh3-4q8m-h48h

RCE IBM Microsoft Code Injection I Access Client Solutions

7.8

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local attack vector and low privilege confirmed by description; no user interaction required of the attacker; full C/I/A impact via arbitrary code execution; no scope change.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 12, 2026 - 21:36 vuln.today

CVE Published

Aug 12, 2026 - 20:45 nvd

HIGH 7.8

DescriptionCVE.org

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file.

AnalysisAI

Arbitrary code execution is achievable on Windows endpoints running IBM i Access Client Solutions (ACS) 1.1.2.0 through 1.1.9.13 when the software is installed in all-users mode, because the installer leaves one or more configuration files world-writable. Any local user with standard (non-administrator) privileges can modify these files to inject code that executes under the security context of other users who subsequently launch the application. No public exploit code or CISA KEV listing has been identified at time of analysis; however, the CVSS 7.8 High rating reflects the full confidentiality, integrity, and availability impact achievable once a local foothold exists.

Technical ContextAI

IBM i Access Client Solutions is a Java-based Windows desktop client used to connect workstations to IBM i (formerly AS/400) midrange systems, a platform prevalent in manufacturing, banking, insurance, and government sectors. The affected product is identified by CPE cpe:2.3:a:ibm:i_access_client_solutions across versions 1.1.2.0 through 1.1.9.13. The root cause maps to CWE-94 (Improper Control of Generation of Code - Code Injection): when ACS is installed using the 'for all users' Windows installer option, configuration files that influence application runtime behavior are placed in a shared directory with overly permissive write ACLs. On Windows, the all-users installation path is typically under Program Files or a shared ProgramData location; if the installer grants write access to the BUILTIN\Users group rather than restricting it to BUILTIN\Administrators, any local user can tamper with files that control code loading or execution paths, which the application processes without integrity verification. This is a classic privilege escalation via insecure file permission pattern, enabled by a misconfigured installer rather than a flaw in the application's runtime logic.

RemediationAI

IBM has released a patch addressing this vulnerability; the exact fixed version should be obtained directly from the vendor advisory at https://www.ibm.com/support/pages/node/7282954, as the specific patched version number was not enumerated in the available intelligence data. Administrators should upgrade all ACS installations to the patched release as the primary remediation. Where immediate patching is not operationally feasible, a targeted compensating control is to manually restrict write permissions on the ACS installation directory and its configuration files using Windows ACLs - specifically, remove write access for BUILTIN\Users and confine write permissions to BUILTIN\Administrators only; note that this permission change may need to be reapplied after any application update that re-runs the installer. As a structural mitigation, organizations should evaluate switching to per-user ACS installations rather than all-users mode, which avoids placing shared configuration files in world-writable locations entirely; this deployment change does require coordinating reinstallation across affected endpoints. Monitoring file-integrity on ACS configuration paths via endpoint security tooling can serve as a detection control in the interim.