{"id":"CVE-2026-92864","kind":"vulnerability","aliases":["CVE-2026-92864"],"related":[],"title":"Hitachi Dynamic Link Manager for AIX: insecure temporary file lets local users escalate","description":"Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market).\n\nThis issue affects Hitachi Dynamic Link Manager for AIX: from 7.4.1-00 before 9.0.4-01; Hitachi Dynamic Link Manager EX for AIX: from 7.4.1-00 before 9.0.4-01.","summary":"Hitachi Dynamic Link Manager for AIX and its EX variant create temporary files insecurely, which can be abused on the same machine. The sources do not state exactly what an attacker gains beyond a local insecure temporary file flaw.","severity":"high","cvss":7.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aix","dynamic-link-manager","hitachi","infrastructure"],"not_affected_if":["version-9.0.4-01-or-later"],"how_to_check":"- Check the installed Dynamic Link Manager version on AIX hosts against the affected range `7.4.1-00` to before `9.0.4-01`","fix":"- Hitachi Dynamic Link Manager for AIX: move to `9.0.4-01` or later\n- Hitachi Dynamic Link Manager EX for AIX: move to `9.0.4-01` or later","status":"open","published_at":"2026-11-10T05:18:16+00:00","first_seen_at":"2026-11-10T05:19:59+00:00","triaged_at":"2026-11-10T05:22:20+00:00","updated_at":"2026-11-10T05:22:20+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T05:22:20Z","model":"claude-haiku-5-5","output":{"fix":"- Hitachi Dynamic Link Manager for AIX: move to `9.0.4-01` or later\n- Hitachi Dynamic Link Manager EX for AIX: move to `9.0.4-01` or later","reach":"local","title":"Hitachi Dynamic Link Manager for AIX: insecure temporary file lets local users escalate","impact":"medium","summary":"Hitachi Dynamic Link Manager for AIX and its EX variant create temporary files insecurely, which can be abused on the same machine. The sources do not state exactly what an attacker gains beyond a local insecure temporary file flaw.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["aix","hitachi","dynamic-link-manager"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"local attacker manipulates temporary files on AIX host","analyst_note":"Confirm the attack prerequisites and worst-case impact from the Hitachi advisory or the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-92864.","how_to_check":"- Check the installed Dynamic Link Manager version on AIX hosts against the affected range `7.4.1-00` to before `9.0.4-01`\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["version-9.0.4-01-or-later"],"who_is_affected":"Teams running Hitachi Dynamic Link Manager or Dynamic Link Manager EX on AIX servers with versions from 7.4.1-00 before 9.0.4-01 are affected. The sources do not describe a remote trigger, so exposure is likely limited to users with access to the affected hosts.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000791,"input_tokens":4626,"output_tokens":657,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-00':104C,117C '-01':107C,120C '-2026':15A,18A '-92864':16A,19A '7.4.1':103C,116C '9.0.4':106C,119C 'abus':44B 'affect':95C 'aix':6A,20B,32B,76C,88C,101C,114C 'attack':57B 'beyond':59B 'creat':37B 'cve':14A,17A 'dynam':2A,22B,28B,72C,83C,97C,109C 'dynamic-link-manag':21B 'escal':13A 'ex':35B,86C,112C 'exact':54B 'file':9A,39B,64B,68C 'flaw':65B 'gain':58B 'hitachi':1A,25B,27B,71C,82C,96C,108C 'infrastructur':26B 'insecur':7A,40B,62B,66C 'issu':94C 'japan':80C 'japanes':91C 'let':10A 'link':3A,23B,29B,73C,84C,98C,110C 'local':11A,61B 'machin':48B 'manag':4A,24B,30B,74C,85C,99C,111C 'market':78C,92C 'outsid':79C 'sourc':50B 'state':53B 'temporari':8A,38B,63B,67C 'user':12A 'variant':36B 'vulner':69C","nicknames":[],"mitigations":[],"who_affected":"Teams running Hitachi Dynamic Link Manager or Dynamic Link Manager EX on AIX servers with versions from 7.4.1-00 before 9.0.4-01 are affected. The sources do not describe a remote trigger, so exposure is likely limited to users with access to the affected hosts.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aix","dynamiclinkmanager","high","hitachi","infrastructure"],"campaign_type":null,"search_a":"'-2026':15A,18A '-92864':16A,19A 'aix':6A 'cve':14A,17A 'dynam':2A 'escal':13A 'file':9A 'hitachi':1A 'insecur':7A 'let':10A 'link':3A 'local':11A 'manag':4A 'temporari':8A 'user':12A","search_b":"'abus':44B 'aix':20B,32B 'attack':57B 'beyond':59B 'creat':37B 'dynam':22B,28B 'dynamic-link-manag':21B 'ex':35B 'exact':54B 'file':39B,64B 'flaw':65B 'gain':58B 'hitachi':25B,27B 'infrastructur':26B 'insecur':40B,62B 'link':23B,29B 'local':61B 'machin':48B 'manag':24B,30B 'sourc':50B 'state':53B 'temporari':38B,63B 'variant':36B","search_c":"'-00':104C,117C '-01':107C,120C '7.4.1':103C,116C '9.0.4':106C,119C 'affect':95C 'aix':76C,88C,101C,114C 'dynam':72C,83C,97C,109C 'ex':86C,112C 'file':68C 'hitachi':71C,82C,96C,108C 'insecur':66C 'issu':94C 'japan':80C 'japanes':91C 'link':73C,84C,98C,110C 'manag':74C,85C,99C,111C 'market':78C,92C 'outsid':79C 'temporari':67C 'vulner':69C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T05:18:16+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss_by":"hirt@hitachi.co.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-92864","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92864","severity":null,"published_at":"2026-11-10T05:18:16+00:00","modified_at":"2026-11-10T05:18:16+00:00","first_seen_at":"2026-11-10T05:19:59+00:00","fetched_at":"2026-11-10T05:19:59+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}