IBM InfoSphere Optim Test Data Fabrication versions 1.0.0 through 1.0.2.7 contain a CWE-22 path traversal vulnerability (CVE-2026-3366). This flaw allows unauthenticated remote attackers to traverse directories by sending URL requests with "dot dot" sequences (/../), potentially exposing arbitrary files on the system. The vulnerability impacts confidentiality (high impact on data disclosure) but does not affect integrity or availability. No official remediation level or patch is currently documented, and no exploits are known in the wild. The product is not cloud-hosted, so remediation requires vendor patching or configuration changes by the user.

The vulnerability permits remote attackers to read arbitrary files on affected systems, potentially exposing sensitive information. It does not impact system integrity or availability. The CVSS score of 7.5 reflects a high confidentiality impact with no required privileges or user interaction for exploitation.

Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Since no official fix or remediation level is documented, users should monitor IBM security advisories closely. In the interim, restrict network access to the affected application to trusted users only and consider implementing web application firewalls or URL filtering to block path traversal attempts.