CVE-2026-81937

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2

Description An issue exists in the import remotelog config file CLI command where a highly privileged authenticated user can inject shell commands through the filename parameter. This can lead to arbitrary command execution with root privileges, impacting the confidentiality, integrity, and availability of the system.

Recommendations Restrict CLI access to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.