CVE-2026-14501 is a vulnerability in IBM Db2 Genius Hub (versions 1.1, 1.1.1, 1.1.2) and IBM Agentics 1.0 caused by the use of potentially dangerous functions without adequate restrictions (CWE-676). This weakness could enable an attacker with low privileges and no user interaction to execute arbitrary code or access sensitive information. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact. There is no vendor advisory or patch information available at this time.

An attacker with low privileges could exploit this vulnerability remotely to execute arbitrary code or obtain sensitive information. The impact is limited to integrity and information disclosure, with no direct confidentiality or availability impact reported. The medium severity reflects the moderate risk posed by this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround has been published. Organizations should monitor IBM's advisories for updates and apply patches once available.