CVE-2026-82900

Summary

IBM Guardium Data Protection allows remote attackers to delete arbitrary files due to improper path name limitation, which could lead to data loss or system compromise. This vulnerability arises from insufficient validation of file paths that could be manipulated to access restricted directories.

Exploitability

Exploitation requires a remote attacker with network access to the Guardium service, and is moderately difficult due to the need for precise path manipulation to bypass directory restrictions.

Blast radius

If exploited, this vulnerability could allow attackers to delete critical system files, configuration data, or sensitive database files, potentially leading to complete system outages or data breaches.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.2.3 or later to address this arbitrary file deletion vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.