An OS command injection vulnerability in IBM i versions 7.3 through 7.6 poses a high risk of total system compromise for authenticated users.

This vulnerability is caused by improper neutralization of special elements used in an OS command (CWE-78). It requires an attacker to have low-level privileges to successfully execute arbitrary commands on the system.

The vulnerability carries a CVSS score of 8.8, reflecting the high potential for full system compromise. If exploited, an attacker could gain unauthorized administrative control over the server, leading to data exfiltration, system destruction, or lateral movement within the network.

Immediate Action: Administrators must apply the relevant PTF (Program Temporary Fix) provided by IBM for their specific release: SJ10964 for 7.3, SJ10966 for 7.4, and SJ10968 for 7.6.

Proactive Monitoring: Security teams should monitor system access logs for unusual command execution patterns or unauthorized attempts to access sensitive system utilities.

Compensating Controls: Ensure that user permissions are strictly enforced, following the principle of least privilege, to minimize the impact if an account is compromised.

Public Exploit Available: Unknown

Given the severity of OS command injection, immediate prioritization of these patches is required. Organizations should coordinate with their system administrators to apply the specified PTFs during the next available maintenance window to neutralize this critical risk.