CVE-2026-85029 describes a path traversal vulnerability in IBM Guardium Data Protection 12.2. The flaw allows a remote attacker to bypass directory restrictions, potentially leading to unauthorized access to sensitive data, deletion of files, or arbitrary code execution. The vulnerability requires low privileges and no user interaction but has a high attack complexity. The CVSS 3.1 vector indicates network attack vector, high complexity, low privileges, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation could result in disclosure of sensitive information, deletion of arbitrary files, and execution of arbitrary code on the affected system, impacting confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected system and monitor for suspicious activity related to path traversal attempts.