High · published September 19, 2026
IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands as root, resulting in full compromise of the Collector appliance.
| Product | Versions | Fixed in |
|---|---|---|
| ibm/guardium_data_protection | all versions | — |