{"id":"CVE-2026-17299","published":"2026-11-07T05:18:37.700","lastModified":"2026-11-10T16:22:12.910","description":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform arbitrary file reads and server-side request forgery due to unrestricted resolution of external references. Externally referenced content in submitted definitions is not sufficiently restricted when processed, and the retrieved content could be returned to the attacker.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cwes":["CWE-918"],"vendors":["ibm"],"products":["api connect"],"references":[{"url":"https://www.ibm.com/support/pages/node/7295635","tags":["Vendor Advisory"]},{"url":"https://www.ibm.com/support/pages/node/7295637","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows authenticated attackers to read arbitrary files and perform server-side request forgery (SSRF) by exploiting unrestricted resolution of external references in submitted API definitions within IBM API Connect versions 10.0.8.0–10.0.8.12 and 12.1.0.0–12.1.1.2.","exploitability":"Exploitation requires valid authentication and the ability to submit API definitions containing external references, but is otherwise straightforward due to lack of input validation.","blast_radius":"Successful exploitation could lead to exposure of sensitive internal files or internal system reconnaissance via SSRF, potentially enabling further compromise depending on network segmentation and service exposure.","remediation":"Upgrade to IBM API Connect 10.0.8.13 or 12.1.1.3 or later, where external reference resolution is properly restricted.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ssrf","arbitrary-file-read","cwe-918","api-connect","authenticated"],"model":"garnet-coder","analyzedAt":"2026-11-07T09:58:58.973Z"}}