CVE-2026-14469 PUBLISHED

IBM Storage Scale Incorrect Authorization

Assigner: ibm
Reserved: 02.07.2026 Published: 08.11.2026 Updated: 08.11.2026

IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow an authenticated attacker to access and manipulate filesets beyond their control due to improper authorization.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS Score: 5.4

Product Status

Vendor IBM
Product Storage Scale Container Native and CSI
Versions
  • Version 6.0.1.0 is affected
  • affected from 5.2.3.0 to 5.2.3.9 (incl.)

Solutions

For IBM Storage Scale Container Native (CSI is bundled with it)

  • 5.2.3.x: https://www.ibm.com/docs/en/scalecontainernative/5.2.3
  • 6.0.1.x:  https://www.ibm.com/docs/en/scalecontainernative/6.0.1

CSI standalone:

  • 2.14.x: https://www.ibm.com/docs/en/scalecsi/2.14.x
  • 3.1.x: https://www.ibm.com/docs/en/scalecsi/3.1.x

References

Problem Types

  • CWE-863 Incorrect Authorization CWE