CVE-2026-84083 is a local privilege escalation vulnerability in IBM Guardium Data Protection 12.2. The issue arises from improper privilege management (CWE-269) in the SUID-root nmap_wrapper binary on the Collector appliance. An attacker with low-privileged local access can exploit insufficient argument validation in this binary to execute arbitrary commands with root privileges, resulting in complete control over the Collector appliance.

Successful exploitation allows a local attacker with low privileges to gain root-level access on the Collector appliance, leading to full compromise of the system. This includes the ability to execute arbitrary commands as root, potentially impacting confidentiality, integrity, and availability of the appliance and its data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to the nmap_wrapper binary.