IBM i versions 7.3 through 7.6 contain a vulnerability classified as CWE-269 (Improper Privilege Management) where improper validation of user-controlled addresses enables a remote attacker to bypass security restrictions. The CVSS 3.1 base score is 8.9, reflecting network attack vector, high complexity, no privileges required, no user interaction, scope change, and high impact on confidentiality and integrity with low impact on availability. No official patch or remediation level has been published yet, and there are no known exploits in the wild at this time.

Successful exploitation allows a remote attacker to bypass security restrictions, potentially leading to full compromise of confidentiality and integrity of the affected IBM i system. Availability impact is low. This could result in unauthorized access or control over system resources.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, monitor IBM's advisories for updates. Until a patch is available, consider restricting network access to affected systems and applying any recommended temporary mitigations from IBM if released.