CVE-2026-13367 is a local privilege escalation vulnerability in IBM Informix Dynamic Server 14.10 and 15.0. The issue resides in the oninit setuid-root utility, which improperly controls access, allowing a local attacker with limited privileges to escalate to root-level access. The vulnerability is classified under CWE-284 (Improper Access Control). The CVSS 3.1 vector indicates low attack complexity, no user interaction required, and high impact on confidentiality, integrity, and availability. No official patch or remediation guidance has been provided yet, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability allows a local attacker to gain root privileges on the affected system, leading to full system compromise. This includes unauthorized access to sensitive data, modification or destruction of data, and disruption of system availability. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to the oninit utility. Avoid running the affected versions on untrusted systems or environments where local user access cannot be tightly controlled.