CVE-2026-17645 is a critical security vulnerability in IBM Financial Transaction Manager (FTM) for RedHat OpenShift version 4.0.6.0. The issue stems from improper privilege management (CWE-269), enabling a remote authenticated attacker to escalate privileges beyond their authorized level. The CVSS 3.1 base score is 9.1 with vector AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, scope change, and high impact on confidentiality, integrity, and availability.

An attacker with valid authentication can exploit this vulnerability to gain elevated privileges, potentially leading to full system compromise including unauthorized access to sensitive data, modification of system components, and disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or fix information is provided, organizations should monitor IBM's official advisories for updates. In the meantime, restrict access to the affected version and ensure that only trusted users have authentication credentials.