CVE-2026-85542

Summary

The vulnerability allows an authenticated attacker to inject arbitrary commands via a crafted GIM bundle, leading to potential arbitrary command execution with elevated privileges.

Exploitability

Exploitation requires an authenticated attacker with access to the GIM bundle import functionality. The attacker must craft a specific payload to exploit the vulnerability.

Blast radius

If exploited, the attacker could gain elevated privileges on the Central Manager, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.2.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.