Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-36367

IBM i is affected by a privilege escalation in IBM i SQL services

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authorization check. A malicious actor can use the elevated privileges of another user profile to gain root access to the host operating system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM i

Default version status: unaffected

  • 7.6affected
  • 7.5affected
  • 7.4affected
  • 7.3affected
  • 7.2affected

References