CVE-2026-14519 is a path traversal vulnerability in IBM App Connect Enterprise that affects versions 13.0.1.0 through 13.0.7.2 and 12.0.1.0 through 12.0.12.27. This vulnerability allows a remote attacker to read arbitrary files on the affected system by bypassing pathname restrictions intended to limit file access to a restricted directory. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts confidentiality but does not affect integrity or availability. As of the provided information, no official fix or patch has been announced by IBM, and no known exploits have been observed in the wild.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to read arbitrary files on the system running IBM App Connect Enterprise, potentially exposing sensitive information. The impact is limited to confidentiality, with no direct impact on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider restricting network access to IBM App Connect Enterprise instances and monitor for suspicious activity related to file access. Follow IBM's official advisories for updates on patches or mitigations.