CVE-2026-15061: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in IBM AIX

IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a path traversal vulnerability (CWE-22) in the nimesis registration service. This vulnerability allows a remote attacker to overwrite files by improperly limiting pathname access to restricted directories. The CVSS 3.1 score is 8.2, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact.

The vulnerability enables remote attackers to overwrite files on affected systems, potentially leading to unauthorized modification of system or application files. This could compromise system integrity and may affect availability to a lesser extent. There is no indication of confidentiality impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided in the available data. Users should monitor IBM security advisories for updates and apply patches once available.