{"id":"CVE-2026-12356","kind":"vulnerability","aliases":["CVE-2026-12356"],"related":[],"title":"IBM MQ: authenticated users with command queue access can run arbitrary code","description":"IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated user with command queue access to execute arbitrary code by injecting malicious arguments into Ant script commands.","summary":"IBM's bulletin (29 Oct 2026) says the Managed File Transfer (MFT) component of IBM MQ lets an authenticated user with command queue access execute arbitrary code by injecting arguments into Ant script commands. CVSS 7.5 (AV:N/AC:H/PR:L). The bulletin does not mention exploitation or a public PoC; Tenable/NotCVE show not in CISA KEV.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"IBM MQ","fixed":["9.2.0.46","9.3.0.43","9.4.0.30","10.0.0.6","10.0.1.0"],"affected":"9.2.0.0-9.2.0.44 LTS; 9.3.0.0-9.3.0.42 LTS; 9.4.0.0-9.4.0.26 LTS; 9.4.0.0-9.4.5.1 CD; 10.0.0.0-10.0.0.5 (Managed File Transfer component)","ecosystem":"vendor"}],"ecosystems":[],"tags":["ibm-mq","infrastructure","managed-file-transfer","messaging","middleware","self-hosted"],"not_affected_if":["auth-required","no-command-queue-access","no-mft-component","no-mfт-component"],"how_to_check":"Only installations with the Managed File Transfer component installed are affected (IBM lists MFT as the affected component). Check the version with dspmqver and whether MFT is installed. Affected: 9.2 LTS 9.2.0.0-9.2.0.44, 9.3 LTS 9.3.0.0-9.3.0.42, 9.4 LTS 9.4.0.0-9.4.0.26, 9.4 CD 9.4.0.0-9.4.5.1, 10.0.0.0-10.0.0.5 (LTS and CD). Also review who holds access to the MFT command queue (SYSTEM.FTE.COMMAND.*).","fix":"Per IBM (known issue DT473747): 9.2 LTS apply 9.2.0.46; 9.3 LTS apply 9.3.0.43; 9.4 LTS apply fix pack 9.4.0.30; 10.0 LTS upgrade to 10.0.0.6; 9.4 CD and 10.0 CD upgrade to 10.0.1.0.","status":"open","published_at":"2026-11-04T21:18:11+00:00","first_seen_at":"2026-11-04T21:49:21+00:00","triaged_at":"2026-11-04T21:50:50+00:00","updated_at":"2026-11-04T22:13:30+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-11-04T21:50:50Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM MQ: authenticated users with command queue access can run arbitrary code","impact":"high","summary":"IBM MQ passes injected arguments into Ant script commands, so a user who already has command queue access can execute arbitrary code. The sources give a CVSS score of 7.5 and do not say whether it is exploited in the wild.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ibm-mq","messaging","middleware"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Authenticated user runs arbitrary code on the queue manager host","analyst_note":"Sources list only the NVD entry; check IBM's security bulletin for the fixed versions and any workaround.","how_to_check":"- Check the installed IBM MQ version against the affected ranges (`9.2.0.44`, `9.3.0.42`, `9.4.0.26`, `9.4.5.1`, `10.0.0.5`)\n- Review which users hold command queue access on the queue managers\n- unknown for other checks, the sources do not say","plain_action":"","needs_analyst":true,"not_affected_if":["auth-required","no-command-queue-access"],"who_is_affected":"Teams running IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, or 10.0.0.0 through 10.0.0.5 LTS and CD. The attacker must already hold an authenticated account with command queue access. Installations outside these ranges, or where no user has command queue access, are not affected per the sources.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000751,"input_tokens":4237,"output_tokens":655,"severity_before":"high"},"analyst_status":"done","analyst_note":"Sources list only the NVD entry; check IBM's security bulletin for the fixed versions and any workaround.","search":"'-12356':15A,18A '-2026':14A,17A '10.0.0.0':109C '10.0.0.5':111C '2026':39B '29':37B '7.5':69B '9.2.0.0':92C '9.2.0.44':94C '9.3.0.0':96C '9.3.0.42':98C '9.4.0.0':100C,104C '9.4.0.26':102C '9.4.5.1':106C 'access':8A,57B,123C 'allow':116C 'ant':65B,133C 'arbitrari':11A,59B,126C 'argument':63B,131C 'authent':3A,52B,118C 'av':70B 'bulletin':36B,75B 'cd':107C,114C 'cisa':88B 'code':12A,60B,127C 'command':6A,55B,67B,121C,135C 'compon':46B 'could':115C 'cve':13A,16A 'cvss':68B 'execut':58B,125C 'exploit':79B 'file':27B,43B 'h/pr':72B 'host':33B 'ibm':1A,19A,22B,34B,48B,90C 'ibm-mq':21B 'infrastructur':24B 'inject':62B,129C 'kev':89B 'l':73B 'let':50B 'lts':95C,99C,103C,112C 'malici':130C 'manag':26B,42B 'managed-file-transf':25B 'mention':78B 'messag':29B 'mft':45B 'middlewar':30B 'mq':2A,20A,23B,49B,91C 'n/ac':71B 'oct':38B 'poc':83B 'public':82B 'queue':7A,56B,122C 'run':10A 'say':40B 'script':66B,134C 'self':32B 'self-host':31B 'show':85B 'tenable/notcve':84B 'transfer':28B,44B 'user':4A,53B,119C","nicknames":[],"mitigations":[],"who_affected":"Teams running IBM MQ with the Managed File Transfer component installed on the listed versions. Exploitation needs an authenticated user with command queue access and high attack complexity. Installations without MFT, or where only trusted admins can reach the MFT command queues, are at low risk.","tier":"B","verified":{"fix":{"at":"2026-11-04T21:53:34Z","by":"analyst","doc":"https://www.ibm.com/support/pages/security-bulletin-ibm-mq-managed-file-transfer-affected-arbitrary-code-execution-vulnerability-cve-2026-12356","run_id":1716},"products":{"at":"2026-11-04T21:53:34Z","by":"analyst","doc":"https://www.ibm.com/support/pages/security-bulletin-ibm-mq-managed-file-transfer-affected-arbitrary-code-execution-vulnerability-cve-2026-12356","run_id":1716},"how_to_check":{"at":"2026-11-04T21:53:34Z","by":"analyst","doc":"https://www.ibm.com/support/pages/security-bulletin-ibm-mq-managed-file-transfer-affected-arbitrary-code-execution-vulnerability-cve-2026-12356","run_id":1716},"who_affected":{"at":"2026-11-04T21:53:34Z","by":"analyst","doc":"https://www.ibm.com/support/pages/security-bulletin-ibm-mq-managed-file-transfer-affected-arbitrary-code-execution-vulnerability-cve-2026-12356","run_id":1716}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["ibmmq","mq"],"ptokens":["ibm","mq"],"labels":["high","ibmmq","infrastructure","managedfiletransfer","messaging","middleware","selfhosted"],"campaign_type":null,"first_public_at":"2026-11-04T21:18:11+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-12356","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12356","severity":null,"published_at":"2026-11-04T21:18:11+00:00","modified_at":"2026-11-04T21:18:11+00:00","first_seen_at":"2026-11-04T21:49:21+00:00","fetched_at":"2026-11-04T21:49:21+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-12356:1716","url":"https://www.ibm.com/support/pages/security-bulletin-ibm-mq-managed-file-transfer-affected-arbitrary-code-execution-vulnerability-cve-2026-12356","severity":null,"published_at":"2026-11-04T21:53:34+00:00","modified_at":"2026-11-04T21:53:37+00:00","first_seen_at":"2026-11-04T21:53:34+00:00","fetched_at":"2026-11-04T21:53:37+00:00","note":"Fixed a typo in a not-affected-if tag.","cites":["https://www.ibm.com/support/pages/security-bulletin-ibm-mq-managed-file-transfer-affected-arbitrary-code-execution-vulnerability-cve-2026-12356"]}],"documents":[{"id":70883,"url":"https://www.ibm.com/support/pages/security-bulletin-ibm-mq-managed-file-transfer-affected-arbitrary-code-execution-vulnerability-cve-2026-12356","title":"IBM Security Bulletin: MQ Managed File Transfer arbitrary code execution (CVE-2026-12356)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}