Hitachi Disk Array Driver: Insecure temporary file vulnerability in AIX and VIOS
Summary
Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server contain an insecure temporary file vulnerability (CWE-377). A local user with low privileges and some user interaction could exploit it to affect the integrity and availability of the system, with no confidentiality impact according to the vendor's CVSS score of 7.9. The flaw is not reachable over the network, and it only matters on IBM Power systems running AIX or VIOS with Hitachi disk arrays.
Affected
- Hitachi Disk Array Driver for AIX: 01-00 to before 01-23-/A
- Hitachi Disk Array Driver for Virtual I/O Server: 01-04 to before 01-23-/A
Fixed in
- Hitachi Disk Array Driver for AIX: 01-23-/A
- Hitachi Disk Array Driver for Virtual I/O Server: 01-23-/A
Workaround
Unknown.
Exploitation
- No evidence of exploitation in the wild found at the time of research.
- CISA SSVC assessment: Exploitation none, Automatable no, Technical Impact partial.
- EPSS very low (0.00124). No public proof-of-concept found by the research, although the aggregator used is not a primary source.
Our recommendation
- Inventory AIX and VIOS hosts running affected Hitachi Disk Array Driver versions.
- Plan the update to 01-23-/A, which also covers CVE-2026-86573 in the same advisory.
- Until patched, restrict local shell and service account access on these hosts.
- Verify the vendor's English advisory, CISA KEV and NVD for changes.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Hitachi security advisory HITACHI-SEC-2026-137 www.hitachi.com
- JVN DB JVNDB-2026-037829 jvndb.jvn.jp
- Vulners NVD record CVE-2026-82715 vulners.com
- VulDB entry 418978 vuldb.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 21:36.
Original description (NVD)
Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.