IBM i 7.6, 7.5, 7.4, and 7.3 are vulnerable to a denial‑of‑service condition caused by uncontrolled recursion in the Integrated Language Environment compiler. An attacker who is able to authenticate and compile source code can supply specially crafted statements that trigger infinite recursion, exhausting system resources and preventing the system from processing additional requests. This weakness falls under CWE‑674 and results in loss of availability for any service using the affected compiler.

The affected products are IBM i versions 7.6, 7.5, 7.4, and 7.3. These runtimes expose the ILE compiler component that is susceptible to the recursion flaw.

The vulnerability has a CVSS score of 6.5 and is not currently listed in the CISA KEV catalog. No EPSS score is available, so the probability of exploitation is unknown. The attack vector requires an authenticated user with access to the compilation function; an attacker can trigger the flaw by uploading or providing malicious source code that contains the recursive statement pattern.