CVE-2026-18875: IBM FTM for RedHat OpenShift RAG poisoning via unauthenticated upsert

Summary

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is affected by CVE-2026-18875, a RAG poisoning flaw (CWE-74) caused by an unauthenticated runbook upsert in the FTM AI agent server at api.vectordb.runbooks.js:51. An unauthenticated attacker can insert malicious runbook content into the agent's vector database. This can steer AI-driven MCP tool calls, potentially triggering unauthorized payment actions or exfiltrating payment data.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Model Context Protocol
• Retrieval-augmented generation

Related items

• InfoDecision Models as Retrieval Gates Against Injection and PollutionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoSigned but Steerable: Measuring and Closing the Text-Vector Integrity Gap in Offline Retrieval-Augmented GenerationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoIAMRAGBENCH: Benchmarking Authorization Expansions in LLM-Generated AWS IAM Policies under RAG PoisoningSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoAccept Changes, Reject Attacks: Robust Memory Management for LLM AgentsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoA Scoping Review of Agentic AI: Applications, Emerging Trends, Risks & Future DirectionsSimilar attack · OpenAlex (peer-reviewed AI security)