VulnSocial

CVE-2026-18875

LOWCVSS 7.3 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert (CWE-74) in the FTM AI agent server (api.vectordb.runbooks.js:51). An unauthenticated attacker can insert malicious runbook content into the agent's vector database to steer AI-driven MCP tool calls, potentially triggering unauthorized payment actions or exfiltrating payment data.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-74

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-09-23: 209-23
Referenced assets2 URLs
Full discourse2 posts
  • Severity Daily@severitydaily

    IBM's payments platform ships an AI agent whose runbook store takes unauthenticated writes. IBM says that can trigger payment actions, and scores the integrity impact Low. No exploitation reported. https://severitydaily.com/ibm-ftm-ai-agent-cve-2026-18875-rag-poisoning-unauthenticated-runbook-upsert-scored-7-3/

    0000057
    24 followersView on X
  • VulDB 🛡@vuldb

    The severity is increased for this new vulnerability affecting IBM Financial Transaction Manager for RedHat OpenShift (CVE-2026-18875) https://vuldb.com/vuln/409009

    00000103
    2.3K followersView on X

Explore more

Back to dashboard