{"id":"CVE-2026-84245","published":"2026-10-08T20:17:37.313","lastModified":"2026-10-10T04:18:18.083","description":"IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-269"],"vendors":["ibm"],"products":["guardium data protection"],"references":[{"url":"https://www.ibm.com/support/pages/node/7288035","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM Guardium Data Protection's cp_wrapper component allows local users to escalate privileges to root, enabling access to sensitive system files. This represents a significant security risk as it can lead to full system compromise from a low-privileged account.","exploitability":"Exploitation requires a local user account with minimal privileges and is relatively straightforward since the vulnerability exists in a core system component that likely runs with elevated permissions.","blast_radius":"If exploited, this vulnerability could allow attackers to gain complete control over the Guardium appliance, potentially leading to data theft, system modification, or further lateral movement within the network.","remediation":"Upgrade to IBM Guardium Data Protection 12.3 or later to address this privilege escalation vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["priv-esc","local","system"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:21:40.477Z"}}