CVE-2026-114468 · Vendor
NO FIX YET
IBM App Connect Operator and App Connect Enterprise Certified Containers Operands can let an attacker who can make HTTP calls inside a running container make administrative calls to a running IntegrationRuntime. The sources do not describe the full impact beyond that.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams running IBM App Connect Enterprise Certified Containers in Kubernetes or OpenShift with the App Connect Operator. The exposure needs an attacker who can already run HTTP calls from within a running container, so the risk is mainly to shared or multi-tenant clusters. The sources do not give affected version ranges.
Not affected if no-app-connect-operator
Who cares ibm-app-connect, kubernetes, openshift
Unknown from the sources.
No fix yet, per the sources.
IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.