CVE-2026-16898

HighCVSS 7.8

Published: 13/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 14/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

2th percentile - higher than 2% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 contain a vulnerability due to improper validation of an attacker-controlled file path, which could allow a local authenticated attacker to change the ownership of arbitrary files.

Risk Assessment

An attacker could take control of system or application files, potentially leading to privilege escalation or system integrity compromise.

Recommendation

Install IBM security updates and monitor file ownership changes on the system.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path.