IBM i versions 7.3 through 7.6 contain an improper authorization vulnerability (CWE-285) in the Navigator for i debugger component. A local attacker with authentication can exploit this flaw to escalate privileges, potentially gaining high-level access to sensitive data or the ability to create new privileged profiles. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high impact on confidentiality and integrity with network attack vector, high attack complexity, and low privileges required.

Successful exploitation allows an authenticated local attacker to escalate privileges, compromising system confidentiality and integrity by accessing or manipulating sensitive data and creating new privileged user profiles. Availability impact is not indicated. This could lead to significant security breaches on affected IBM i systems.

Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. No official fix or temporary workaround is indicated in the provided data. Until a patch is available, restrict local authenticated access to trusted users only and monitor for suspicious activity related to the Navigator for i debugger.