---
id: CVE-2026-105453
title: 'IBM Sterling Connect:Direct for Unix Improper Privilege Management'
summary: "IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and\_6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management."
severity: high
cvss: 8.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N'
cvssSource: cna
cwe:
  - CWE-269
vendor: IBM
product: Sterling Connect Direct for Unix
affected:
  - sterling_connect_direct_for_unix >= 6.3.0.0 <= 6.3.0.7
  - sterling_connect_direct_for_unix >= 6.4.0.0 <= 6.4.0.6
published: '2026-10-19'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T23:56:21.017Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-105453'
references:
  - url: 'https://www.ibm.com/support/pages/node/7292735'
tags:
  - cve.org
ingestedAt: '2026-10-20T00:48:34.070Z'
---

## Overview

IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.

## Affected

- `sterling_connect_direct_for_unix >= 6.3.0.0 <= 6.3.0.7`
- `sterling_connect_direct_for_unix >= 6.4.0.0 <= 6.4.0.6`

## Remediation

IBM strongly recommends addressing the vulnerability now by upgrading

ProductVersionRemediation/Fix/InstructionsIBM Sterling Connect:Direct for Unix6.3.0.0 - 6.3.0.7.iFix029Apply 6.3.0.7.iFix030, included in 6.3.0.7.iFix033 available on  Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .IBM Sterling Connect:Direct for Unix6.4.0.0 - 6.4.0.6.iFix020Apply 6.4.0.6.iFix021, included in 6.4.0.6.iFix025 available on  Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .