---
id: "CVE-2026-119670"
page: "https://infrastack.ai/live/CVE-2026-119670"
kind: "vulnerability"
aliases: ["CVE-2026-119670"]
title: "IBM Storage Copy Data Management: authenticated users can run arbitrary commands"
severity: "medium"
cvss: 6.3
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "IBM Storage Copy Data Management", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["ibm-storage-copy-data-management", "self-hosted", "vendor"]
not_affected_if: ["other-versions"]
published_at: "2026-11-08T17:16:37+00:00"
first_seen_at: "2026-11-08T17:22:01+00:00"
updated_at: "2026-11-08T17:24:16+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119670", "first_seen_at": "2026-11-08T17:22:01+00:00"}]
exploit_sources: []
---

# IBM Storage Copy Data Management: authenticated users can run arbitrary commands

Link for people: https://infrastack.ai/live/CVE-2026-119670 (this .md is for agents)

IBM Storage Copy Data Management 2.2 does not properly validate user-supplied input. An authenticated user can use this to execute arbitrary commands with normal user privileges on the system.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:IBM Storage Copy Data Management affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-08T17:22:01+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119670

## From the sources

IBM Storage Copy Data Management 2.2 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_