This vulnerability in IBM Verify Identity Access Container and IBM Security Verify Access Container allows a locally authenticated user to execute malicious scripts that originate from outside the trusted control sphere of the application. The issue affects specific versions of these products and is classified as CWE-829. The CVSS v3.1 base score is 8.5, indicating high severity, with attack vector local, low attack complexity, no privileges required, no user interaction, scope changed, high confidentiality impact, low integrity impact, and low availability impact. No official patch or remediation level has been published by IBM as of the provided data.

Successful exploitation could allow a local attacker to execute malicious scripts within the context of the affected application, potentially leading to significant confidentiality loss, some integrity degradation, and availability impact. The scope of the vulnerability is changed, indicating that the exploit could affect resources beyond the initially vulnerable component. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users only and monitor for suspicious local activity related to script execution. Avoid running affected versions in untrusted environments where local users might have access.