IBM i versions 7.3 through 7.6 contain an authentication bypass vulnerability (CWE-287) where the system improperly validates the identity asserted by a client. This flaw enables a remote attacker to circumvent security controls, potentially gaining unauthorized access and control over the system. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high impact on confidentiality, integrity, and availability. No official remediation or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to unauthorized access with high impact on confidentiality, integrity, and availability of the IBM i system. This could result in data disclosure, data modification, or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor IBM advisories for updates and consider implementing compensating controls such as network-level restrictions to limit access to IBM i systems.