Command Injection Vulnerability in IBM Guardium Data Protection

CVE-2026-85542

What is CVE-2026-85542?

IBM Guardium Data Protection 12.2 has a command injection vulnerability that allows authenticated attackers to exploit the GIM bundle import functionality. By crafting a malicious GIM bundle, attackers can manipulate the arguments passed to the tar command, which may lead to arbitrary command execution with elevated privileges on the Central Manager. This vulnerability poses serious security risks, as it can enable unauthorized access and control over sensitive data protection processes.

References