CVE-2026-6794 is a double free vulnerability (CWE-415) in IBM Concert versions 1.0.0 through 3.0.0. The issue arises from improper memory management that can be exploited by a local attacker to corrupt heap memory, leading to arbitrary code execution within the context of the affected process. The vulnerability is classified as high severity with a CVSS 3.1 base score of 7.8, reflecting high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported, and no vendor patch or remediation information is currently provided.

Successful exploitation allows a local attacker to corrupt heap memory and execute arbitrary code with the privileges of the affected process. This can lead to full compromise of the application and potentially the underlying system depending on the process privileges. The vulnerability impacts confidentiality, integrity, and availability at a high level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit local access to trusted users only and monitor for suspicious activity related to IBM Concert processes.