CVE-2026-11713: IBM WebSphere Application Server Liberty Incorrect Authorization
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.
Other sources
IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM WebSphere Application Server Libertyto a version that resolves this vulnerability.Fixed in 26.0.0.10
Event History
Frequently Asked Questions
Which deployments are affected?
IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.9 are affected when the restConnector-2.0 feature is enabled.
What level of access does an attacker need?
The vector indicates that an attacker needs network access and low-level privileges. No user interaction is required.
Is the restConnector-2.0 feature required for exposure?
Yes. The vulnerability is described as affecting Liberty deployments with restConnector-2.0 enabled; the provided data does not indicate that deployments without this feature are affected.
What is the potential impact?
The issue can allow privilege escalation and has low confidentiality and integrity impact in the supplied severity vector. No availability impact is indicated.