IBM Guardium Data Protection 12.0, 12.1, and 12.2 contain a path traversal weakness that permits a remote attacker to execute arbitrary code. The flaw allows the attacker to reference files outside the intended directory and is classified as CWE-22. The escalation can lead to full system compromise if the application runs with elevated privileges, allowing the attacker to gain control over the host.

The vulnerability affects the Sniffer component of IBM Guardium Data Protection across versions 12.0, 12.1, and 12.2. All installations of these releases that include the Sniffer component are at risk; the issue does not affect other Guardium products or different components.

The CVSS score of 9.8 indicates critical severity, and while an EPSS score is not available, the lack of early exploitation reports suggests the threat is low to moderate until patched. The vulnerability is not listed in the CISA KEV catalog. Attackers can exploit this remotely by uploading a specially crafted request that causes the Sniffer to access files outside its working directory, leading to arbitrary code execution. No additional mitigations are provided by IBM beyond patching, so unpatched systems remain fully vulnerable.