CVE-2026-84245

Summary

IBM Guardium Data Protection's cp_wrapper component allows local users to escalate privileges to root, enabling access to sensitive system files. This represents a significant security risk as it can lead to full system compromise from a low-privileged account.

Exploitability

Exploitation requires a local user account with minimal privileges and is relatively straightforward since the vulnerability exists in a core system component that likely runs with elevated permissions.

Blast radius

If exploited, this vulnerability could allow attackers to gain complete control over the Guardium appliance, potentially leading to data theft, system modification, or further lateral movement within the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.3 or later to address this privilege escalation vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.