What is CVE-2026-6389?

CVE-2026-6389 is a high-severity vulnerability in Ibm Turbonomic Prometurbo Agent, classified under Improper Privilege Management. CVSS score: 8.8/10. Published 2026-04-30.

How severe is CVE-2026-6389?

High severity. CVSS v3 base score is 8.8 out of 10.

Privilege escalation in Ibm Turbonomic Prometurbo Agent

CVE-2026-6389

IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or…

Vulnerability class: Privilege Escalation

EPSS: 0.000 (2.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Ibm Turbonomic Prometurbo Agent — versions 8.16.0
Ibm Turbonomic_prometurbo_agent

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

psirt@us.ibm.com (vendor-advisory, patch, Vendor Advisory)

Frequently asked questions

What is CVE-2026-6389?: CVE-2026-6389 is a high-severity vulnerability in Ibm Turbonomic Prometurbo Agent, classified under Improper Privilege Management. CVSS score: 8.8/10. Published 2026-04-30.
How severe is CVE-2026-6389?: High severity. CVSS v3 base score is 8.8 out of 10.