CVE-2026-17473 IBM CVE debrief

Who should care

IBM Documentation Offline users and administrators, as well as security teams and vulnerability management teams, should be aware of this vulnerability and take necessary precautions to mitigate the risk. This includes reviewing the affected versions of IBM Documentation Offline, checking for vendor-provided patches or updates, and implementing compensating controls to restrict access to the affected system or monitor for suspicious activity. Additionally, operators and platform administrators should be informed about the potential impact of this vulnerability on their systems and take appropriate measures to ensure the security of their environments. Security teams should also prioritize remediation efforts and conduct inventory checks to identify potentially vulnerable systems.

Technical summary

The vulnerability exists due to improper limitation of a pathname to a restricted directory in IBM Documentation Offline 1.0.0 through 1.4.1. A remote attacker could exploit this vulnerability to read arbitrary files by sending a specially crafted request to the affected system. The vulnerability is considered high-severity due to its potential impact on the confidentiality of sensitive information. IBM Documentation Offline users and administrators should review the affected versions and apply vendor-provided patches or updates to prevent exploitation.

Defensive priority

High-priority defensive actions are recommended due to the high CVSS score of 7.5 and the potential for remote attackers to read arbitrary files.

Recommended defensive actions

• Verify the affected versions of IBM Documentation Offline and check for vendor-provided patches or updates.
• Implement compensating controls, such as restricting access to the affected system or monitoring for suspicious activity.
• Conduct inventory checks to identify potentially vulnerable systems and prioritize remediation efforts.

Evidence notes

The CVE record and NVD detail provide information on the vulnerability, but further verification is needed to confirm the affected scope and vendor remediation. Additional review of vendor documentation and security advisories is recommended to ensure accurate understanding of the vulnerability and its potential impact. It is also essential to verify the affected versions of IBM Documentation Offline and check for vendor-provided patches or updates.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.