{"id":"CVE-2026-105991","kind":"vulnerability","aliases":["CVE-2026-105991"],"related":[],"title":"IBM Db2 Genius Hub: missing Content Security Policy header allows security bypass","description":"IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to a missing Content Security Policy header.","summary":"IBM Db2 Genius Hub versions 1.1.2 through 1.1.5 omit a Content Security Policy header. A remote attacker with a valid login can bypass some security restrictions as a result.","severity":"low","cvss":3.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["db2","ibm-db2-genius-hub","other"],"not_affected_if":["no-authenticated-users","version-outside-range"],"how_to_check":"- Check the installed Db2 Genius Hub version against `1.1.2`, `1.1.3`, `1.1.4`, `1.1.5`\n- Confirm whether the web console sends a Content-Security-Policy response header (unknown whether the sources name a specific check)","fix":null,"status":"open","published_at":"2026-11-04T21:17:43+00:00","first_seen_at":"2026-11-04T21:49:17+00:00","triaged_at":"2026-11-04T21:51:34+00:00","updated_at":"2026-11-04T21:51:34+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-04T21:51:34Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"IBM Db2 Genius Hub: missing Content Security Policy header allows security bypass","impact":"low","summary":"IBM Db2 Genius Hub versions 1.1.2 through 1.1.5 omit a Content Security Policy header. A remote attacker with a valid login can bypass some security restrictions as a result.","audience":"businesses","category":"other","nicknames":[],"who_cares":["ibm-db2-genius-hub","db2"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker bypasses some security restrictions after logging in remotely","analyst_note":"Find the IBM security bulletin for Db2 Genius Hub to confirm the bypassed restriction, any fixed version, and whether a patch exists.","how_to_check":"- Check the installed Db2 Genius Hub version against `1.1.2`, `1.1.3`, `1.1.4`, `1.1.5`\n- Confirm whether the web console sends a Content-Security-Policy response header (unknown whether the sources name a specific check)","plain_action":"","needs_analyst":true,"not_affected_if":["version-outside-range","no-authenticated-users"],"who_is_affected":"Teams that run IBM Db2 Genius Hub in the affected version range, where remote users have accounts. The sources do not describe the exact restriction bypassed or the configuration needed. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000682,"input_tokens":4124,"output_tokens":539,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-105991':15A,18A '-2026':14A,17A '1.1.2':30B,58C '1.1.3':59C '1.1.4':60C '1.1.5':32B,61C 'allow':10A,63C 'attack':41B,67C 'authent':66C 'bypass':12A,47B,69C 'content':6A,35B,76C 'could':62C 'cve':13A,16A 'db2':2A,19B,22B,26B,55C 'due':72C 'genius':3A,23B,27B,56C 'header':9A,38B,79C 'hub':4A,24B,28B,57C 'ibm':1A,21B,25B,54C 'ibm-db2-genius-hub':20B 'login':45B 'miss':5A,75C 'omit':33B 'polici':8A,37B,78C 'remot':40B,65C 'restrict':50B,71C 'result':53B 'secur':7A,11A,36B,49B,70C,77C 'valid':44B 'version':29B","nicknames":[],"mitigations":[],"who_affected":"Teams that run IBM Db2 Genius Hub in the affected version range, where remote users have accounts. The sources do not describe the exact restriction bypassed or the configuration needed. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["db2","ibmdb2geniushub","low","other"],"campaign_type":null,"first_public_at":"2026-11-04T21:17:43+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105991","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105991","severity":null,"published_at":"2026-11-04T21:17:43+00:00","modified_at":"2026-11-04T21:17:43+00:00","first_seen_at":"2026-11-04T21:49:17+00:00","fetched_at":"2026-11-04T21:49:17+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}