CVE-2026-82715: CWE-377 Insecure Temporary File in Hitachi Hitachi Disk Array Driver for AIX

This vulnerability (CVE-2026-82715) involves insecure handling of temporary files in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. The affected versions are 01-00 for the AIX driver and 01-04 for the Virtual I/O Server driver, with fixes presumably in or after version 01-23-/A. The CVSS 3.1 score of 7.9 reflects a high severity, with attack vector local, low attack complexity, requiring low privileges and user interaction, and impacts integrity and availability with scope changed. No vendor advisory or patch information is currently provided.

The vulnerability allows an attacker with local access and low privileges to exploit insecure temporary file handling, potentially leading to high impact on system integrity and availability. Confidentiality is not affected. The scope is changed, indicating that the vulnerability may affect resources beyond the initially vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Until a fix is available, restrict local access and monitor for suspicious activity related to temporary file usage in the affected drivers.