PT-2026-3579 · Ibm · Ibm Licensing Operator

Published 2026-01-20 · Updated 2026-02-16 · CVE-2025-12985

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Licensing Operator (affected versions not specified)

Description The IBM Licensing Operator incorrectly assigns privileges to security critical files. This could allow a local root escalation within a container running the IBM Licensing Operator image.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2025-12985

Affected Products

Ibm Licensing Operator

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-12985 · Security Note
• https://twitter.com/TheHackerWire/status/2013664479452733456 · Twitter Post
• https://twitter.com/vuldb/status/2013735060495835440 · Twitter Post
• https://twitter.com/CVEnew/status/2013634329625178313 · Twitter Post
• https://ibm.com/support/pages/license-service-privilege-escalation-vulnerability · Note
• https://twitter.com/DavidMarquet19/status/2023306504103772376 · Twitter Post