CVE-2026-7870 is an uncontrolled search path element vulnerability affecting IBM i versions 7.3, 7.4, 7.5, and 7.6. The issue arises from an unqualified library call that could be exploited by a malicious user to execute arbitrary code with administrator privileges. This elevates the attacker's privileges, potentially compromising system confidentiality, integrity, and availability. The vulnerability is classified under CWE-427 and has a CVSS v3.1 base score of 8.8, indicating high severity. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation allows an attacker with some level of user privilege to execute arbitrary code with administrator-level privileges on affected IBM i systems. This can lead to full system compromise, including unauthorized access, modification, or destruction of data and disruption of system availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict user privileges to the minimum necessary and monitor for suspicious activity related to library calls. Follow IBM's official communications for updates on patches or workarounds.