IBM i versions 7.3 through 7.6 contain a vulnerability classified as CWE-269 (Improper Privilege Management) that allows a local attacker with limited privileges to escalate their privileges. The CVSS v3.1 score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The vulnerability is local attack vector with low attack complexity and no user interaction required. As of the publication date, no vendor advisory or patch information is available to confirm remediation status.

A local attacker could exploit this vulnerability to gain elevated privileges on affected IBM i systems, potentially leading to full system compromise including unauthorized access to sensitive data, modification of system configurations, and disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious privilege escalation attempts.