This vulnerability (CVE-2026-2311) affects IBM i versions 7.2 to 7.6 and is caused by an invalid authorization check in the IBM i Web Administration GUI. The flaw allows a user with existing high privileges to escalate their privileges further by executing arbitrary code with administrator-level rights. The CVSS v3.1 base score is 6.4, reflecting a medium severity with network attack vector, high attack complexity, required privileges, and user interaction. No official fix or patch has been documented in the provided data.

Successful exploitation could lead to privilege escalation where an attacker with some level of access can execute code with administrator privileges, potentially compromising confidentiality, integrity, and availability of the affected system. However, exploitation requires the attacker to already have high privileges and user interaction, limiting the ease of exploitation. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the IBM i Web Administration GUI to trusted users only and monitor for unusual activity. Avoid granting unnecessary high privileges to users to reduce risk.