This vulnerability (CWE-285: Improper Authorization) affects IBM i versions 7.3 through 7.6. A local attacker with authentication can exploit the Navigator for i debugger to escalate privileges. The flaw allows the attacker to gain higher-level access than intended, potentially compromising confidentiality and integrity by accessing or modifying sensitive data and creating privileged user profiles.

An authenticated local attacker can escalate privileges, leading to unauthorized access and manipulation of sensitive data on the IBM i system. The attacker may also create new user profiles with elevated privileges, increasing the risk of further system compromise. The CVSS score of 8.2 reflects high impact on confidentiality and integrity, with no impact on availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Until a patch is available, restrict local authenticated access to trusted users only and monitor for suspicious activity related to the Navigator for i debugger.