CVE-2026-17049

Summary

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an authorization bypass vulnerability (CWE-639) where an authenticated attacker can leverage user-controlled keys to access unauthorized resources and modify arbitrary documents, leading to confidentiality, integrity, and availability impacts.

Exploitability

Exploitation requires a low-privileged authenticated account and no user interaction; the attacker must supply a manipulated key to bypass intended authorization checks.

Blast radius

Successful exploitation could allow an attacker to exfiltrate sensitive configuration or tenant data, tamper with API policies or gateway rules, and potentially disrupt service availability across multiple tenants in shared environments.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM API Connect 12.1.1.3 or later, as this version includes the fix for CVE-2026-17049.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.