---
id: "CVE-2026-114468"
page: "https://infrastack.ai/live/CVE-2026-114468"
kind: "vulnerability"
aliases: ["CVE-2026-114468"]
title: "IBM App Connect Operator: attacker in container can make admin calls"
severity: "medium"
cvss: 6.0
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["ibm-app-connect", "kubernetes", "openshift", "vendor"]
not_affected_if: ["no-app-connect-operator"]
published_at: "2026-11-13T22:17:21+00:00"
first_seen_at: "2026-11-13T22:33:34+00:00"
updated_at: "2026-11-13T22:34:37+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114468", "first_seen_at": "2026-11-13T22:33:34+00:00"}]
exploit_sources: []
---

# IBM App Connect Operator: attacker in container can make admin calls

Link for people: https://infrastack.ai/live/CVE-2026-114468 (this .md is for agents)

IBM App Connect Operator and App Connect Enterprise Certified Containers Operands can let an attacker who can make HTTP calls inside a running container make administrative calls to a running IntegrationRuntime. The sources do not describe the full impact beyond that.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-13T22:33:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114468

## From the sources

IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_