This vulnerability affects IBM i versions 7.3 through 7.6 and is classified as CWE-367, a TOCTOU race condition. The flaw arises when the system improperly handles symbolic links during the time between checking access permissions and using the referenced objects. This race condition can be exploited by a remote attacker with authentication to gain unauthorized access to system objects, potentially leading to full compromise of confidentiality, integrity, and availability of affected systems. The CVSS 3.1 vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, and a scope change with high impact on all security properties. There is no vendor advisory or patch information available at this time.

Successful exploitation allows a remote authenticated attacker to bypass access controls and gain unauthorized access to system objects on IBM i systems. This can lead to full compromise of confidentiality, integrity, and availability of the affected system components. The vulnerability affects multiple IBM i versions and poses a significant security risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, organizations should monitor IBM advisories for updates. No specific temporary mitigations are provided in the available data.