CVE-2026-17402

Summary

IBM API Connect contains an OS command injection vulnerability (CWE-78) in versions 10.0.8.0–10.0.8.12 and 12.1.0.0–12.1.1.2, where untrusted, authenticated user input is passed unsafely to the OS shell, enabling remote command execution.

Exploitability

Requires valid authentication and successful injection of malicious shell metacharacters into a vulnerable parameter; no public exploit code is available yet.

Blast radius

An attacker could gain full control of the underlying host, exfiltrate sensitive data, pivot within the network, or disrupt service availability.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM API Connect 10.0.8.13 or later for the 10.0.8.x branch, or to 12.1.1.3 or later for the 12.1.x branch.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.