# CVE-2026-17068: IBM i NFS version restriction bypass

Source: https://junglewise.ai/threats/cve-2026-17068-ibm-i-7-3-7-4-7-5-and-7-6-could-allow-a-local-attacker-to-bypass  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-16. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-17068 · Severity: medium · CVSS 5.4 · Published 2026-10-16

IBM i is an enterprise operating system that manages file sharing and data access across organizational networks using NFS (Network File System). An authenticated local attacker can bypass security restrictions that control which NFS protocol versions are allowed, potentially allowing them to access files or systems with reduced security enforcement. This could lead to unauthorized data exposure or integrity issues for systems relying on version-based access controls.

Technologies: [IBM I](https://junglewise.ai/threats/technologies/i). Vendors: [IBM](https://junglewise.ai/threats/vendors/ibm).

## Quick answers

**Is CVE-2026-17068 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-17068 being exploited in the wild.

**How severe is CVE-2026-17068?** Medium severity, with a CVSS score of 5.4, published 16 October 2026.

**Which products and versions are affected?** IBM I 7.3, 7.4, 7.5, 7.6.

**Is there a fix for CVE-2026-17068?** Yes: fixed in IBM i 7.6 PTF SJ11753, 7.5 PTF SJ11790, 7.4 PTF SJ11802, 7.3 PTF SJ11804. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-17068 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-17068?** Check whether you run IBM I at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in IBM i 7.6 PTF SJ11753, 7.5 PTF SJ11790, 7.4 PTF SJ11802, 7.3 PTF SJ11804

## Technical details

The vulnerability is an improper authorization flaw (CWE-285) in IBM i's NFS export configuration that fails to properly enforce the export version flag. A local, authenticated attacker can use this to bypass version restrictions and gain access to NFS shares with weaker protocol versions that may have security limitations. The attack requires network access and prior authentication credentials.

## Affected products

- IBM i 7.3, 7.4, 7.5, 7.6

## Timeline

- 2026-10-16: disclosed

## References

- [https://www.ibm.com/support/pages/node/7292423](https://www.ibm.com/support/pages/node/7292423)

## Related threats

- [IBM i Navigator authentication bypass via improper access control](https://junglewise.ai/threats/cve-2026-93744-ibm-i-7-3-7-4-7-5-and-7-6-could-allow-an-unathenticated-remote)
- [IBM i ChrootDirectory security restriction bypass in OpenSSH](https://junglewise.ai/threats/cve-2026-17491-ibm-i-7-3-7-4-7-5-and-7-6-is-could-allow-a-remote-authenticated)
- [IBM i improper authentication bypass in SST/DST](https://junglewise.ai/threats/cve-2026-17488-ibm-i-7-3-7-4-7-5-and-7-6-could-allow-a-remote-authenticated)
- [IBM i file handle access control vulnerability in NFS](https://junglewise.ai/threats/cve-2026-17073-ibm-i-7-3-7-4-7-5-and-7-6-could-allow-a-local-attacker-to-obtain)
- [IBM i Digital Certificate Manager denial of service](https://junglewise.ai/threats/cve-2026-107674-ibm-i-7-3-7-4-7-5-and-7-6-is-vulnerable-to-a-denial-of-service)