CVE-2026-17068: IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.
Other sources
IBM i could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.6Patch SJ11753 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.5Patch SJ11790 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.4Patch SJ11802 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.3Patch SJ11804
Event History
Frequently Asked Questions
Which IBM i releases are affected?
IBM i 7.3, 7.4, 7.5, and 7.6 are identified as affected.
What access does an attacker need to exploit this issue?
The issue is described as exploitable by a local attacker. The provided CVSS vector also indicates that low privileges are required and no user interaction is needed.
What security impact could exploitation have?
Successful exploitation could allow bypass of NFS version restrictions. The CVSS vector indicates low impact to confidentiality and integrity, with no availability impact.