This vulnerability (CWE-22) affects IBM i versions 7.3 through 7.6. It involves improper limitation of a pathname to a restricted directory, enabling a remote authenticated attacker to perform unauthorized file deletions via path traversal. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

An attacker with valid authentication credentials can delete arbitrary files on the affected IBM i systems. This can lead to data loss or disruption of services relying on those files. There is no confidentiality impact, but integrity and availability impacts are low.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented as of the publication date. Users should monitor IBM advisories for updates and consider restricting authenticated user permissions to limit potential impact.