---
id: "CVE-2026-112125"
page: "https://infrastack.ai/live/CVE-2026-112125"
kind: "vulnerability"
aliases: ["CVE-2026-112125"]
title: "HA Monitor: incorrect permissions on a critical resource; upgrade to the fixed release for your branch"
severity: "high"
cvss: 7.3
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "HA Monitor", "fixed": ["01-35-02", "01-42-02", "01-58-02", "01-70-01", "01-77-02", "01-83-01", "01-34-01"], "affected": "JP: AIX 01-00 to 01-35-01; Linux 01-10 to 01-42-01, 01-42 to 01-58-01, 01-60 to 01-70, 01-71 to 01-77-01, 01-78 to 01-83; HP-IPF 01-07 to 01-34. EN: Linux 01-52 to 01-58-01, 01-60 to 01-70, 01-71 to 01-77-01, 01-78 to 01-83", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["aix", "ha-monitor", "hitachi", "hp-ux", "linux", "other"]
not_affected_if: ["patched-branch-release"]
published_at: "2026-11-10T05:17:42+00:00"
first_seen_at: "2026-11-10T05:19:58+00:00"
updated_at: "2026-11-10T05:23:48+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112125", "first_seen_at": "2026-11-10T05:19:58+00:00"}, {"source": "analyst", "url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-163/index.html", "first_seen_at": "2026-11-10T05:23:48+00:00", "cites": ["https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-163/index.html"]}]
exploit_sources: []
---

# HA Monitor: incorrect permissions on a critical resource; upgrade to the fixed release for your branch

Link for people: https://infrastack.ai/live/CVE-2026-112125 (this .md is for agents)

Hitachi says HA Monitor has an Incorrect Permission Assignment for Critical Resource flaw (CVSS 7.3, local, low privileges, user interaction required). Hitachi does not name the resource or describe the impact beyond the CVSS vector. Fixed releases exist for each affected branch on AIX, Linux and HP-IPF.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:HA Monitor affected JP: AIX 01-00 to 01-35-01; Linux 01-10 to 01-42-01, 01-42 to 01-58-01, 01-60 to 01-70, 01-71 to 01-77-01, 01-78 to 01-83; HP-IPF 01-07 to 01-34. EN: Linux 01-52 to 01-58-01, 01-60 to 01-70, 01-71 to 01-77-01, 01-78 to 01-83 fixed 01-35-02, 01-42-02, 01-58-02, 01-70-01, 01-77-02, 01-83-01, 01-34-01

## How to check

Find the installed HA Monitor version and compare it with the affected ranges in hitachi-sec-2026-163 for your OS and language edition. Affected: Japanese AIX 01-00 to 01-35-01; Linux 01-10 to 01-42-01, 01-42 to 01-58-01, 01-60 to 01-70, 01-71 to 01-77-01, 01-78 to 01-83; HP-IPF 01-07 to 01-34. English Linux 01-52 to 01-58-01, 01-60 to 01-70, 01-71 to 01-77-01, 01-78 to 01-83.

## Fix

Upgrade to the fixed release for your branch. Japanese version: AIX 01-35-02; Linux 01-42-02, 01-58-02, 01-70-01, 01-77-02, 01-83-01; HP-IPF 01-34-01. English version (Linux): 01-58-02, 01-70-01, 01-77-02, 01-83-01.

## Timeline

- 2026-11-10T05:19:58+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112125
- 2026-11-10T05:23:48+00:00 analyst https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-163/index.html — Read Hitachi hitachi-sec-2026-163: lists affected/fixed per OS and language branch; resource and attack details not disclosed; no workaround listed. 01-83-01 is only the fix for the 01-78..01-83 Linux branch.

## Documents

- [advisory] Vulnerability in HA Monitor (hitachi-sec-2026-163) https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-163/index.html

## From the sources

Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor.

This issue affects HA Monitor: from 01-00 before 01-83-01.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_