CVE-2026-108767

Genius Hub could emit unintended HTTP response headers

IBM · Db2 Genius Hub administration console

First documented disclosure · Review checkpoint

Summary

A remote authenticated user could influence the structure of a response from the database operations console.

Severity and exploitation evidence

Medium · 4.3/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed sources describe the vulnerability and its conditions. They do not identify malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Input included in HTTP headers was not adequately neutralized.

Conditions required

The attacker must be authenticated and able to reach the affected operation.

Potential impact

The attacker could split an HTTP response. IBM does not identify a particular affected route or downstream client.

Affected versions and configurations

1.1.2, 1.1.3, 1.1.4 and 1.1.5.

Fix and mitigation status

1.1.6.

Practical next steps

Upgrade Db2 Genius Hub to 1.1.6. IBM lists no workaround.

Operating lesson

Validate values before they are written into HTTP response headers.

Evidence and limits

This is a first-party console flaw in IBM’s Genius Hub and Agentics bulletin. IBM does not attribute it to model behavior.

Sources