CVE-2026-17472

Summary

This flaw allows a remote authenticated attacker to access or modify unauthorized resources due to wildcard usage in role-based access control (RBAC) permission definitions, posing a significant security risk.

Exploitability

Exploitation is relatively straightforward for a remote authenticated attacker who can leverage wildcard permissions in RBAC definitions, requiring access to the affected IBM Concert version.

Blast radius

If exploited, the attacker could gain unauthorized access or modify critical resources, leading to potential data breaches or system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Concert 3.1.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.