VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 3, 2025· Updated Sep 3, 2025

IBM Transformation Advisor incorrect permissions

CVE-2025-36193

Description

IBM Transformation Advisor 2.0.1 through 4.3.1 incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM Transformation Advisor Operator Catalog image.

Affected products

2
  • IBM/Transformation Advisorv5
    cpe:2.3:a:ibm:transformation_advisor:2.0.1:*:*:*:*:*:*:*
    Range: 2.0.1
  • IBM/Transformation Advisorllm-create
    Range: >=2.0.1, <=4.3.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.