IBM i versions 7.3 through 7.6 contain a CWE-22 path traversal vulnerability that could allow a remote attacker with authentication to manipulate files outside intended directories. The CVSS 3.1 base score is 2.7, reflecting low impact with network attack vector, low attack complexity, and required privileges. No user interaction is needed, and the vulnerability does not affect confidentiality or availability. No official remediation or patch information is provided in the available data.

The vulnerability allows an authenticated remote attacker to perform limited file manipulation via path traversal. The impact is limited to integrity with no confidentiality or availability impact. The low CVSS score indicates minimal risk under typical conditions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official remediation level or patch links are provided, users should monitor IBM advisories for updates. Until a fix is available, restrict access to trusted authenticated users only and apply standard access controls to limit potential exploitation.