CVE-2026-84271

Summary

IBM Guardium Data Protection 12.2 allows local attackers to bypass signature verification during patch installation, enabling execution of arbitrary code with root privileges. This represents a critical privilege escalation vulnerability that can be exploited without user interaction once local access is gained.

Exploitability

The vulnerability is moderately easy to exploit as it requires only local access and can be triggered by installing a malicious patch file, making it highly practical for attackers who already have system access.

Blast radius

If exploited, this vulnerability could lead to complete system compromise with root privileges, potentially allowing attackers to exfiltrate sensitive data or establish persistent backdoors on Guardium appliances.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.3 or later to address this signature verification bypass vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.