CVE-2026-82900: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in IBM Guardium Data Protection

CVE-2026-82900 describes a path traversal vulnerability in IBM Guardium Data Protection versions 12.1 and 12.2.2. Due to improper limitation of a pathname to a restricted directory, a remote attacker could exploit this flaw to delete arbitrary files on the affected system. The vulnerability is classified under CWE-22 and has a CVSS 3.1 base score of 8.1, indicating high severity. No known exploits in the wild have been reported, and no patch or remediation information is provided in the available data.

Successful exploitation of this vulnerability could lead to deletion of arbitrary files by a remote attacker without privileges, impacting confidentiality, integrity, and availability of the system. The CVSS vector indicates network attack vector with high complexity and no privileges or user interaction required, making it a serious threat if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor IBM's advisories for updates. Until a fix is available, restrict network access to the affected IBM Guardium Data Protection instances and apply any recommended temporary mitigations from IBM.