CVE-2026-17473 is a path traversal vulnerability (CWE-22) in IBM Documentation Offline versions 1.0.0 through 1.4.1. The flaw allows remote attackers to read arbitrary files on the affected system by bypassing pathname restrictions intended to confine access to a restricted directory. The vulnerability is remotely exploitable without authentication or user interaction. No vendor advisory or patch information is currently provided, and no known exploits are reported in the wild.

Successful exploitation allows an attacker to read arbitrary files on the system, potentially exposing sensitive information. The vulnerability does not impact integrity or availability but compromises confidentiality. The CVSS 3.1 base score is 7.5 (high), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the affected service and monitor for suspicious activity related to file access attempts.