CVE-2024-31890: IBM i privilege escalation

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-06-21 · updated 2026-06-17
Weakness: CWE-250

Description

IBM i 7.3, 7.4, and 7.5 product IBM TCP/IP Connectivity Utilities for i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 288171.

Affected products

IBM i: from 7.3 through 7.5

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/288171
https://www.ibm.com/support/pages/node/7158240
https://exchange.xforce.ibmcloud.com/vulnerabilities/288171
https://www.ibm.com/support/pages/node/7158240

Get alerted when CVE-2024-31890 or the next vulnerability affects your stack