{"id":"CVE-2026-109158","kind":"vulnerability","aliases":["CVE-2026-109158"],"related":[],"title":"IBM App Connect: AI Agent may log sensitive environment details in errors","description":"IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands may allow the AI Agent to log sensitive information about the deployed environment within error messages.","summary":"IBM App Connect Operator and App Connect Enterprise Certified Containers can let the AI Agent write sensitive information about the deployed environment into error messages. An attacker who can read those error messages or logs can learn details about the deployment.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"IBM App Connect Operator","fixed":["13.7.0","12.0.29"],"affected":"unknown, see IBM bulletin table","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["ai-agent","ibm-app-connect","kubernetes","vendor"],"not_affected_if":["no-ai-agent","no-app-connect-containers"],"how_to_check":"- Check the installed IBM App Connect Operator version (e.g. oc get csv -A | grep -i appconnect) and the operand versions of your IntegrationDashboard/IntegrationServer resources against the fixed versions.\n- Check whether the AI Agent in the App Connect Enterprise Dashboard is in use, and who can read the Dashboard container logs and error output.","fix":"CD and 13 LTS: upgrade App Connect Enterprise Certified Container Operator to 13.7.0 or higher, with all components at 13.0.9.1-r1 or later. 12.0 LTS: Operator 12.0.29 or later, components 12.0.12-r29 or later. IBM lists no workarounds.","status":"open","published_at":"2026-11-13T22:17:20+00:00","first_seen_at":"2026-11-13T22:33:33+00:00","triaged_at":"2026-11-13T22:34:25+00:00","updated_at":"2026-11-13T22:38:48+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-11-13T22:34:25Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"IBM App Connect: AI Agent may log sensitive environment details in errors","impact":"low","summary":"IBM App Connect Operator and App Connect Enterprise Certified Containers can let the AI Agent write sensitive information about the deployed environment into error messages. An attacker who can read those error messages or logs can learn details about the deployment.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["ibm-app-connect","kubernetes","ai-agent"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker reads environment details leaked in error messages","analyst_note":"Confirm affected versions, fixed versions and required config from the IBM security bulletin for CVE-2026-109158 (NVD link in sources).","how_to_check":"- Check whether your deployment runs the IBM App Connect Operator or App Connect Enterprise Certified Containers with the AI Agent enabled\n- Review who can read the container logs and error output of those workloads\n- unknown whether a specific version is affected","plain_action":"","product_name":"IBM App Connect Operator","needs_analyst":true,"not_affected_if":["no-ai-agent","no-app-connect-containers"],"who_is_affected":"Teams running IBM App Connect Operator or App Connect Enterprise Certified Containers that include the AI Agent. Exposure depends on who can read the error messages and logs those containers produce. The sources do not state affected versions or configuration details.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000743,"input_tokens":4519,"output_tokens":582,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm affected versions, fixed versions and required config from the IBM security bulletin for CVE-2026-109158 (NVD link in sources).","search":"'-109158':15A,18A '-2026':14A,17A 'agent':5A,25B,46B,89C 'ai':4A,24B,45B,88C 'ai-ag':23B 'allow':86C 'app':2A,20A,28B,33B,37B,74C,79C 'attack':58B 'certifi':40B,82C 'connect':3A,21A,29B,34B,38B,75C,80C 'contain':41B,83C 'cve':13A,16A 'deploy':52B,72B,96C 'detail':10A,69B 'enterpris':39B,81C 'environ':9A,53B,97C 'error':12A,55B,63B,99C 'ibm':1A,19A,27B,32B,73C,78C 'ibm-app-connect':26B 'inform':49B,93C 'kubernet':30B 'learn':68B 'let':43B 'log':7A,66B,91C 'may':6A,85C 'messag':56B,64B,100C 'oper':35B,76C 'operand':84C 'operator':22A 'read':61B 'sensit':8A,48B,92C 'vendor':31B 'within':98C 'write':47B","nicknames":[],"mitigations":[],"who_affected":"Teams running IBM App Connect Enterprise Certified Containers (Operator and operands, Continuous Delivery, 12.0 LTS or 13 LTS tracks) where the Dashboard's AI Agent can write sensitive environment details into error messages and logs. Exposure depends on who can read those errors and logs. Teams not running App Connect on Kubernetes or not using the AI Agent can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-13T22:38:48Z","by":"analyst","doc":"https://www.ibm.com/support/pages/security-bulletin-ibm-app-connect-enterprise-certified-container-operator-and-operands-are-vulnerable-loss-confidentiality-and-denial-service-due-multiple-cves-6","run_id":3949},"mitigations":{"at":"2026-11-13T22:38:48Z","by":"analyst","doc":"https://www.ibm.com/support/pages/security-bulletin-ibm-app-connect-enterprise-certified-container-operator-and-operands-are-vulnerable-loss-confidentiality-and-denial-service-due-multiple-cves-6","run_id":3949},"workarounds":{"at":"2026-11-13T22:38:48Z","by":"analyst","doc":"https://www.ibm.com/support/pages/security-bulletin-ibm-app-connect-enterprise-certified-container-operator-and-operands-are-vulnerable-loss-confidentiality-and-denial-service-due-multiple-cves-6","run_id":3949}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["appconnectoperator","ibmappconnectoperator"],"ptokens":["app","connect","ibm","operator"],"labels":["aiagent","high","ibmappconnect","kubernetes","vendor"],"campaign_type":null,"search_a":"'-109158':15A,18A '-2026':14A,17A 'agent':5A 'ai':4A 'app':2A,20A 'connect':3A,21A 'cve':13A,16A 'detail':10A 'environ':9A 'error':12A 'ibm':1A,19A 'log':7A 'may':6A 'operator':22A 'sensit':8A","search_b":"'agent':25B,46B 'ai':24B,45B 'ai-ag':23B 'app':28B,33B,37B 'attack':58B 'certifi':40B 'connect':29B,34B,38B 'contain':41B 'deploy':52B,72B 'detail':69B 'enterpris':39B 'environ':53B 'error':55B,63B 'ibm':27B,32B 'ibm-app-connect':26B 'inform':49B 'kubernet':30B 'learn':68B 'let':43B 'log':66B 'messag':56B,64B 'oper':35B 'read':61B 'sensit':48B 'vendor':31B 'write':47B","search_c":"'agent':89C 'ai':88C 'allow':86C 'app':74C,79C 'certifi':82C 'connect':75C,80C 'contain':83C 'deploy':96C 'enterpris':81C 'environ':97C 'error':99C 'ibm':73C,78C 'inform':93C 'log':91C 'may':85C 'messag':100C 'oper':76C 'operand':84C 'sensit':92C 'within':98C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T22:17:20+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-109158","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109158","severity":null,"published_at":"2026-11-13T22:17:20+00:00","modified_at":"2026-11-13T22:17:20+00:00","first_seen_at":"2026-11-13T22:33:33+00:00","fetched_at":"2026-11-13T22:33:33+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-109158:3949","url":"https://www.ibm.com/support/pages/security-bulletin-ibm-app-connect-enterprise-certified-container-operator-and-operands-are-vulnerable-loss-confidentiality-and-denial-service-due-multiple-cves-6","severity":null,"published_at":"2026-11-13T22:38:48+00:00","modified_at":"2026-11-13T22:38:48+00:00","first_seen_at":"2026-11-13T22:38:48+00:00","fetched_at":"2026-11-13T22:38:48+00:00","note":"Read IBM multi-CVE bulletin (via fetch, long page): CVE-2026-109158 = AI Agent in App Connect Enterprise Dashboard may log sensitive info (CWE-532, CVSS 7.5). Fix: Operator 13.7.0+ with components 13.0.9.1-r1+ (CD and 13 LTS); 12.0 LTS: Operator 12.0.29+, components 12.0.12-r29+. No workarounds. Exact affected ranges per track not read; no exploitation, no posts searched.","cites":["https://www.ibm.com/support/pages/security-bulletin-ibm-app-connect-enterprise-certified-container-operator-and-operands-are-vulnerable-loss-confidentiality-and-denial-service-due-multiple-cves-6"]}],"documents":[{"id":150675,"url":"https://www.ibm.com/support/pages/security-bulletin-ibm-app-connect-enterprise-certified-container-operator-and-operands-are-vulnerable-loss-confidentiality-and-denial-service-due-multiple-cves-6","title":"IBM Security Bulletin: App Connect Enterprise Certified Container operator and operands (multiple CVEs)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}