Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2025-36186

IBM Db2 privilege escalation

Description

IBM Db2 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) under specific configurations could allow a local user to execute malicious code that escalate their privileges to root due to execution of unnecessary privileges operated at a higher than minimum level.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Db2

Default version status: unaffected

  • 12.1.0 to ≤ 12.1.3affected

References