{"id":"CVE-2026-105453","kind":"vulnerability","aliases":["CVE-2026-105453"],"related":[],"title":"IBM Sterling Connect Direct for Unix: local users can gain elevated privileges","description":"IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.","summary":"IBM Sterling Connect Direct for Unix versions 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 mishandle privileges. A local attacker with a foothold on the host can escalate to higher privileges.","severity":"high","cvss":8.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["connect-direct","ibm-sterling","infrastructure","self-hosted","unix"],"not_affected_if":["not-installed","patched-version"],"how_to_check":"- Run the Connect Direct for Unix version command or check the installed package version against `6.3.0.7` and `6.4.0.6`\n- unknown","fix":"- Move Connect Direct for Unix to a fixed release listed in the IBM advisory; the sources do not name the fixed version\n- unknown","status":"open","published_at":"2026-10-20T00:17:23+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-25T03:01:55+00:00","updated_at":"2026-10-25T03:01:55+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T03:01:55Z","model":"claude-haiku-5-5","output":{"fix":"- Move Connect Direct for Unix to a fixed release listed in the IBM advisory; the sources do not name the fixed version\n- unknown","reach":"local","title":"IBM Sterling Connect Direct for Unix: local users can gain elevated privileges","impact":"high","summary":"IBM Sterling Connect Direct for Unix versions 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 mishandle privileges. A local attacker with a foothold on the host can escalate to higher privileges.","category":"infrastructure","nicknames":[],"who_cares":["ibm-sterling","connect-direct","unix","self-hosted"],"confidence":0.6,"needs_auth":"yes","worst_case":"local user gains elevated privileges on the host","analyst_note":"Find the IBM security bulletin for this CVE to get the fixed version and any workaround; the sources only cite NVD.","how_to_check":"- Run the Connect Direct for Unix version command or check the installed package version against `6.3.0.7` and `6.4.0.6`\n- unknown","needs_analyst":true,"not_affected_if":["not-installed","patched-version"],"who_is_affected":"Teams running IBM Sterling Connect Direct for Unix in the affected 6.3.0.x and 6.4.0.x ranges on a Unix host. Anyone on a patched release or without this product can skip it. Exposure depends on who holds local accounts on the host, which the sources do not describe.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000611,"input_tokens":3323,"output_tokens":557,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-105453':15A,18A '-2026':14A,17A '6.3.0.0':37B,66C '6.3.0.7':39B,68C '6.4.0.0':41B,70C '6.4.0.6':43B,72C 'allow':74C 'attack':48B,77C 'connect':3A,20B,32B,62C 'connect-direct':19B 'could':73C 'cve':13A,16A 'direct':4A,21B,33B,63C 'due':82C 'elev':11A,80C 'escal':56B 'foothold':51B 'gain':10A,79C 'higher':58B 'host':28B,54B 'ibm':1A,23B,30B,60C 'ibm-sterl':22B 'improp':84C 'infrastructur':25B 'local':7A,47B,76C 'manag':86C 'mishandl':44B 'privileg':12A,45B,59B,81C,85C 'self':27B 'self-host':26B 'sterl':2A,24B,31B,61C 'unix':6A,29B,35B,65C 'user':8A 'version':36B","nicknames":[],"mitigations":[],"who_affected":"Teams running IBM Sterling Connect Direct for Unix in the affected 6.3.0.x and 6.4.0.x ranges on a Unix host. Anyone on a patched release or without this product can skip it. Exposure depends on who holds local accounts on the host, which the sources do not describe.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T00:17:23+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105453","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105453","severity":null,"published_at":"2026-10-20T00:17:23+00:00","modified_at":"2026-10-21T04:17:06+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}