CVE-2025-33103: IBM i privilege escalation

Q: What is the severity of CVE-2025-33103?

CVE-2025-33103 is classified as a privilege escalation vulnerability that can lead to unauthorized root access.

Q: How do I fix CVE-2025-33103?

To fix CVE-2025-33103, update your IBM i TCP/IP Connectivity Utilities to the latest version provided by IBM.

Q: What versions of IBM i are affected by CVE-2025-33103?

CVE-2025-33103 affects IBM i versions 7.2 through 7.6.

Q: What impact does CVE-2025-33103 have on system security?

CVE-2025-33103 allows attackers to elevate privileges, potentially leading to full control over the affected IBM i system.

Published May 17, 2025

Updated

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 product IBM TCP/IP Connectivity Utilities for i contains a privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system.

Other sources

IBM i product IBM TCP/IP Connectivity Utilities for i contains a privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system.

— IBM

Affected Software

10 affected components

IBM i<=7.6

IBM i<=7.5

IBM i<=7.4

IBM i<=7.3

IBM i<=7.2

IBM i=7.2

IBM i=7.3

IBM i=7.4

IBM i=7.5

IBM i=7.6

Remediation

Information

The issue can be addressed by applying a PTF to IBM i. IBM i release 7.6, 7.5, 7.4, 7.3, 7.2 will be fixed. The IBM i 5770-TC1 PTF numbers listed below resolve the vulnerability. IBM i Release 5770-TC1 PTF Number PTF Download Link 7.6 SJ05513 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ05513 7.5 SJ05494 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ05494 7.4 SJ05505 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ05505 7.3 SJ05514 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ05514 7.2 SJ05525 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ05525

Event History

May 17, 2025

CVE Published

via IBM·12:00 AM

CVE Published

via MITRE·04:02 PM

Data Sourced

via MITRE·04:02 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7233799

Frequently Asked Questions

What is the severity of CVE-2025-33103?

CVE-2025-33103 is classified as a privilege escalation vulnerability that can lead to unauthorized root access.

How do I fix CVE-2025-33103?

To fix CVE-2025-33103, update your IBM i TCP/IP Connectivity Utilities to the latest version provided by IBM.

What versions of IBM i are affected by CVE-2025-33103?