The vulnerability is an improper enforcement of the NFS export version flag in IBM i 7.3 through 7.6. A local attacker can bypass NFS version restrictions, which may allow the attacker to mount shares with a higher protocol version than permitted. This level of control can lead to unauthorized access to data stored on shared filesystems, compromising confidentiality and integrity.

Affected products are IBM i releases 7.3, 7.4, 7.5, and 7.6. The vulnerability resides in the NFS export configuration handling of IBM i. The product is IBM i for each of the four releases listed.

The CVSS score of 5.4 indicates a medium severity vulnerability with known local attacker access. Because the EPSS score is not available, the likelihood of exploitation is uncertain, but the lack of KEV listing suggests no confirmed widespread exploitation yet. The vulnerability requires local access to the system or the ability to configure NFS exports, following which an attacker can mount an NFS share ignoring the configured version restrictions. The attack can be carried out from within the same network or by someone with physical or local access to the IBM i host.