CVE-2026-4917 is a path traversal vulnerability in IBM Guardium Data Protection 12.1. It allows an administrative user to traverse directories beyond the intended restricted directory by using specially crafted URL requests containing '/../' sequences. This improper limitation of pathname access could enable the attacker to write arbitrary files on the system, potentially impacting system integrity. The vulnerability has a medium severity rating with a CVSS 3.1 base score of 4.9 (Network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, no availability impact). No patch or official remediation guidance has been published by IBM as of the data provided.

An attacker with administrative privileges could exploit this vulnerability to write arbitrary files on the system, potentially leading to unauthorized modification of system files or configurations. There is no reported impact on confidentiality or availability. The vulnerability requires high privileges and network access but does not require user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted personnel only and monitor for suspicious URL requests containing directory traversal patterns. Avoid exposing the vulnerable service to untrusted networks. Follow IBM's official advisories for updates on remediation.