This vulnerability, identified as CWE-915, affects IBM i versions 7.3 through 7.6. It arises from unsafe reflection leading to improperly controlled modification of dynamically-determined object attributes. An authenticated remote attacker could exploit this flaw to bypass security restrictions, potentially leading to high confidentiality and integrity impacts. The CVSS 3.1 vector indicates network attack vector, low complexity, required privileges at the level of a user, no user interaction, and unchanged scope. No vendor advisory or patch information is currently available.

The vulnerability allows a remote authenticated attacker to bypass security restrictions, which can lead to unauthorized access or modification of sensitive information (high confidentiality and integrity impact). Availability impact is low. The attack complexity is low, and no user interaction is required, increasing the risk if exploited. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, users should monitor IBM's security advisories for updates. Until a patch is available, restricting access to trusted users and minimizing privileges may reduce risk.