CVE-2026-84842 is a path traversal vulnerability in IBM Guardium Data Protection version 12.2. It affects the Datasource REST component, allowing an authenticated remote attacker to delete arbitrary files on the system. This improper limitation of pathname to a restricted directory (CWE-22) can lead to denial of service or compromise system integrity by removing critical files.

Exploitation of this vulnerability allows an authenticated attacker to delete files arbitrarily, which can disrupt service availability (denial of service) and compromise the integrity of the system by removing essential files. There is no indication of confidentiality impact. The attack requires authentication but no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict access to the Datasource REST component to trusted users only and monitor for suspicious file deletion activities.