EUVD-2026-62522
GHSA-jm22-p83h-gjg4
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AV:L because local session access is required; PR:L as any standard user account suffices; full C/I/A because root compromise yields complete system control.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management.
AnalysisAI
Local privilege escalation in IBM AIX 7.2 and 7.3, and IBM PowerVM VIOS 4.1 allows an authenticated low-privileged user to gain full elevated privileges due to improper privilege management (CWE-269). The CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms that any standard local user account is sufficient to trigger the flaw with low complexity and no user interaction, resulting in complete confidentiality, integrity, and availability compromise of the affected system. No public exploit identified at time of analysis, and a vendor patch is available via IBM advisory.
Technical ContextAI
IBM AIX is a proprietary UNIX-based operating system developed by IBM, designed to run on IBM POWER architecture hardware and widely deployed in enterprise environments (financial services, healthcare, large-scale computing). IBM PowerVM VIOS (Virtual I/O Server) is the virtualization management layer on IBM Power Systems, responsible for providing shared I/O resources to logical partitions (LPARs). CWE-269 (Improper Privilege Management) identifies the root cause as a failure to correctly restrict, validate, or enforce privilege boundaries within the OS or VIOS privilege management subsystem - allowing a lower-privileged process or user to assume elevated, likely root-level, privileges. Affected CPEs are cpe:2.3:a:ibm:aix:*:*:*:*:*:*:*:* (covering AIX 7.2 and 7.3) and cpe:2.3:a:ibm:powervm_vios:*:*:*:*:*:*:*:* (covering VIOS 4.1). The wildcard CPE version ranges indicate that exact affected sub-versions within those major releases are not further scoped by available NVD data.
RemediationAI
Apply the vendor-released patch per the IBM Security Advisory at https://www.ibm.com/support/pages/node/7283858. Specific patched version numbers are not independently confirmed from available input data beyond IBM confirming patch availability - administrators should consult the advisory directly to identify the correct fix level for their AIX 7.2, 7.3, or VIOS 4.1 installation and apply the appropriate APAR or Technology Level update. As compensating controls prior to patching, restrict local interactive login access to the minimum necessary user accounts via PAM or AIX RBAC policies; audit and reduce the setuid/setgid binary footprint; and review AIX Role-Based Access Control (RBAC) configurations for overly permissive privilege delegation. In VIOS environments, restrict which users have VIOS shell access, as VIOS compromise can affect all hosted LPARs. Note that access restriction mitigations reduce exposure but do not eliminate the underlying flaw - patching remains the definitive remediation.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today