CVE-2026-19087 is a vulnerability in IBM Financial Transaction Manager (FTM) for RedHat OpenShift where improper privilege management can enable a local attacker to escalate privileges within the container environment. The vulnerability is classified under CWE-250 (Execution with Unnecessary Privileges). It affects versions >=4.0.6.0 and <=4.0.10.0. The CVSS v3.1 base score is 4.4, indicating medium severity, with attack vector local, low attack complexity, low privileges required, no user interaction, and impacts confidentiality and integrity to a limited extent.

A local attacker with access to the container environment can escalate privileges beyond what is necessary, potentially leading to unauthorized access to sensitive information or modification of data within the container. The impact is limited to confidentiality and integrity with no availability impact reported. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to the container environment to trusted users only and monitor for suspicious privilege escalation attempts. Follow IBM's official guidance once published.