CVE-2026-82896 describes a path traversal vulnerability in IBM Guardium Data Protection 12.2. An attacker with valid authentication credentials could exploit this flaw to traverse directories on the affected system, potentially accessing files and data beyond their authorized permissions. The vulnerability is classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory). The CVSS v3.1 base score is 7.6, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and impacts including low confidentiality, high integrity, and low availability.

A remote authenticated attacker could leverage this vulnerability to access or modify files outside the intended directory structure, potentially leading to unauthorized information disclosure or modification. The impact on confidentiality is low, integrity is high, and availability is low according to the CVSS vector. There are no known exploits in the wild at this time.

No patch or remediation information is currently provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to trusted users and monitor for suspicious activity related to directory traversal attempts.