CVE-2025-33109: IBM I

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to a privilege escalation caused by an invalid database authority check. A bad actor could execute a database procedure or function without having all required permissions, in addition to causing denial of service for some database actions.

Affected products

• IBM I: version 7.2 only; version 7.3 only; version 7.4 only; version 7.5 only; version 7.6 only

Published 2025-07-24. Last modified 2026-06-17.