CVE-2026-17381

Summary

IBM API Connect versions 10.0.8.0–10.0.8.12 and 12.1.0.0–12.1.1.2 contain an authorization flaw (CWE-639) where user-controlled keys are improperly validated, allowing authenticated attackers to access sensitive information they should not be authorized to view. This is a horizontal privilege escalation via broken access control on API resources.

Exploitability

Exploitation requires valid authentication and knowledge of the affected API endpoints; no public exploit exists, but the low attack complexity (AC:L) suggests straightforward exploitation by skilled attackers.

Blast radius

Successful exploitation could expose sensitive configuration data, credentials, or customer information stored or processed by the API gateway, potentially affecting multiple tenants or backend services.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM API Connect 10.0.8.13 or 12.1.1.3 or later, as these versions include fixes for CVE-2026-17381.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.