IBM i versions 7.3 through 7.6 contain an authentication bypass vulnerability (CWE-294) caused by improper session management. A remote attacker with valid authentication credentials could exploit this weakness to perform unauthorized actions and access sensitive data. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high impact on confidentiality and integrity, with no impact on availability. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

Successful exploitation allows a remote authenticated attacker to bypass intended authentication controls, leading to unauthorized operations and disclosure of sensitive information. The confidentiality and integrity of the affected system are at high risk, while availability is not impacted.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor IBM's advisories for updates and consider limiting access to affected IBM i versions to trusted users only.