CVE-2026-16932: IBM AIX vulnerability

Q: Who is exposed to this issue?

Systems running IBM AIX or IBM PowerVM VIOS are in scope. Exploitation requires a local attacker.

Q: What does an attacker need to control to exploit it?

The attacker needs to be able to influence the ODMDIR environment variable. Improper validation of that variable could enable execution of arbitrary commands.

Published Aug 15, 2026

Updated

AIX could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable.

Affected Software

3 affected components

IBM AIX<=7.2

IBM AIX<=7.3

IBM PowerVM VIOS<=4.1

Event History

Aug 15, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7283858

Frequently Asked Questions

Who is exposed to this issue?

Systems running IBM AIX or IBM PowerVM VIOS are in scope. Exploitation requires a local attacker.

What does an attacker need to control to exploit it?

The attacker needs to be able to influence the ODMDIR environment variable. Improper validation of that variable could enable execution of arbitrary commands.