The cp_wrapper component of IBM Guardium Data Protection 12.2 contains a flaw that permits a local user with lower privileges to execute actions as root. By exploiting this weakness, an attacker can read, alter, or delete system files that normally require elevated permissions, undermining the confidentiality, integrity, and availability of the protected environment. The issue is classified as CWE‑269, a signature of privilege escalation vulnerabilities.

IBM Guardium Data Protection version 12.2 on Linux is affected. The fix is distributed as SqlGuard_12.0p233 FixPack and can be obtained through IBM FixCentral. Systems that have not applied this update are vulnerable; the vulnerability remains in the cp_wrapper module until the latest patch is installed.

With a CVSS score of 7.8, the flaw is a high‑severity local privilege escalation. An attacker with any local account can target cp_wrapper to elevate to root. The EPSS data is unavailable, and the vulnerability is not listed in CISA KEV, so public exploitation evidence is lacking. Nevertheless, if an attacker gains local access, the rapid elevation to root makes the vulnerability a serious internal risk that should be addressed promptly.