CVE-2026-82900 IBM Guardium Data Protection is affected by multiple vulnerabilities.

High 8.1 Published 8 Oct 2026 Updated 10 Oct 2026

Remote attackers can delete arbitrary files in IBM Guardium Data Protection due to improper path restriction, requiring vendor patches.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-82900?

CVE-2026-82900 is a high-severity path traversal vulnerability in Ibm Guardium Data Protection, published on 8 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory.

Weakness: CWE-22

Which versions are affected by CVE-2026-82900?

It affects 1 product.

Products include Ibm Guardium Data Protection.

How do I fix CVE-2026-82900?

No fix has been published for CVE-2026-82900 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2026-82900 being exploited?

There is no known exploitation of CVE-2026-82900 in the wild and no public exploit code.

All Ibm Guardium Data Protection vulnerabilities

Sources

Also known as GHSA-jp42-9gq2-4m5w.