CVE-2026-17297

Summary

IBM API Connect contains an open redirect vulnerability in its sign-in flow: user-supplied redirect URLs are not properly validated, allowing an attacker to trick users into completing authentication on a malicious site and stealing their session tokens or credentials.

Exploitability

Exploitation requires social engineering (e.g., phishing) to诱导 the victim to click a crafted link, as the vulnerability is triggered only when a user manually initiates the redirect during authentication.

Blast radius

Successful exploitation enables full account takeover of any affected IBM API Connect user, potentially compromising sensitive API management data and administrative controls.

Detection

Defenders should monitor authentication logs for unexpected redirects to external domains during sign-in flows—specifically, look for HTTP 302 responses with Location headers pointing to domains outside the organization’s trusted domain list. No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM API Connect 10.0.8.13 or later, or 12.1.1.3 or later, as these versions include the vendor’s fix for the open redirect flaw.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.