high8.8
CVE-2025-36367
IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authorization check.
Impact
IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authorization check. A malicious actor can use the elevated privileges of another user profile to gain root access to the host operating system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | I | Versions 7.2, 7.3, 7.4, 7.5, 7.6 |