---
id: CVE-2026-17073
title: >-
  IBM i is Affected By Improper Authorization and Access Control Vulnerabilities
  in Network File System
summary: >-
  IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive
  information due to missing subtree checks during file handle resolution.
severity: medium
cvss: 5.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N'
cvssSource: cna
cwe:
  - CWE-284
vendor: IBM
product: i
affected:
  - i 7.6
  - i 7.5
  - i 7.4
  - i 7.3
published: '2026-10-16'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T18:39:33.190Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-17073'
references:
  - url: 'https://www.ibm.com/support/pages/node/7292423'
tags:
  - cve.org
ingestedAt: '2026-10-16T19:46:24.439Z'
---

## Overview

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution.

## Affected

- `i 7.6`
- `i 7.5`
- `i 7.4`
- `i 7.3`

## Remediation

Application of the PTFs require additional actions that if not taken will cause existing NFS mounts to become inaccessible. View each PTF's cover letter for the additional actions required prior to installation.

IBM i Release5770-SS1 
PTF Number(s)PTF Download Link(s)7.6SJ11753 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11753 7.5SJ11790 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11790 7.4SJ11802 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11802 7.3SJ11804 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11804 



IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.