CVE-2026-75782: IBM Aspera Enterprise Webapps Untrusted Search Path
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.
Other sources
IBM Aspera Enterprise WebApps could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Aspera Enterprise WebAppsto a version that resolves this vulnerability.Fixed in 1.0.7
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are affected. Exploitation requires local access and low privileges on the affected system.
What could an attacker achieve?
A local attacker could exploit the misconfigured PATH environment variable to gain elevated privileges. The listed impact includes high confidentiality, integrity, and availability impact.