CVE-2026-13460
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
IBM Storage Scale versions 5.2.3.0 through 5.2.3.8 and 6.0.0.0 through 6.0.1.0 contain a hardcoded token in the GUI source code, used for inter-node cluster communication and REST API authentication between GUIs.
Risk Assessment
An attacker who obtains the token could impersonate trusted nodes or GUIs, potentially leading to unauthorized access to data and compromise of system integrity.
Recommendation
Immediately upgrade IBM Storage Scale to a version where the token is no longer hardcoded, and rotate all existing tokens.
Original NVD description (English source)
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI.