CVE-2026-17475: IBM Planning Analytics Local is affected by security vulnerabilities

Published Oct 12, 2026

Updated

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control.

Affected Software

1 affected component

IBM Planning Analytics Local=2.0, =2.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Planning Analytics Local to a version that resolves this vulnerability.
Fixed in 2.1.24

Event History

Oct 12, 2026

CVE Published

via MITRE·10:40 PM

Data Sourced

via MITRE·10:40 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·11:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

A remote attacker who is authenticated to IBM Planning Analytics Local could exploit it. The issue involves deleting folders and applications that belong to other users.

What access does an attacker need?

The attacker needs valid authenticated access; no user interaction is required. The provided severity vector indicates low privileges are sufficient.

What is the likely impact?

The disclosed impact is unauthorized deletion of other users’ folders and applications. The severity vector indicates high availability impact and low integrity impact, with no confidentiality impact.