CVE-2026-105465

Summary

IBM Db2 database instances with db2locssh enabled are vulnerable to privilege escalation, allowing attackers with access to the db2 instance to gain higher privileges and potentially full system access. This is particularly concerning because Db2 is a critical enterprise database system.

Exploitability

Exploitation requires local access to a Db2 instance with db2locssh enabled, making it moderately difficult but not highly complex to achieve, especially in environments where Db2 instances are already compromised or where attackers have gained initial access through other means.

Blast radius

If exploited, this vulnerability could allow attackers to escalate privileges within the Db2 environment and potentially move laterally to other systems, given that Db2 is often used as a core enterprise database with extensive access to sensitive data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable db2locssh functionality for all Db2 instances or upgrade to IBM Db2 11.5.10 or 12.1.6 which contain the fix for this privilege escalation vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.