CVE-2025-48982CWE-269privilege-escalation

CVE-2025-48982

High · published October 31, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
7.0
In the wild
Unconfirmed
What it is

⚡ A crafty administrator could be the unwitting key to a local privilege escalation nightmare! If tricked into restoring a malicious file, attackers could gain control like a guest who sneaks into a restricted area. 🚨 Think of it like a hotel where a staff member is misled by a guest into letting them into a suite they shouldn’t have access to. This vulnerability allows an attacker to bypass important security measures simply by tricking someone at the front desk! An attacker could exploit this vulnerability to run commands with elevated privileges! This could lead to unauthorized access to sensitive information, modification of files, or even full control over the affected system. It’s a serious breach that could turn your secure server into a playground for malicious activities.

Put simply

Think of it like a hotel where a staff member is misled by a guest into letting them into a suite they shouldn’t have access to. This vulnerability allows an attacker to bypass important security measures simply by tricking someone at the front desk! This vulnerability in Veeam Agent for Microsoft Windows allows local privilege escalation when a system administrator is deceived into restoring a malicious file, enabling the attacker to execute code with higher privileges than intended.

What to do

An attacker could exploit this vulnerability to run commands with elevated privileges! This could lead to unauthorized access to sensitive information, modification of files, or even full control over the affected system. It’s a serious breach that could turn your secure server into a playground for malicious activities. To protect your systems, ensure that all your Veeam software is updated to the latest version as patches are released. Educate your system administrators about the risks of restoring files from untrusted sources and implement additional verification steps before executing restorations. You've got this! Stay vigilant, apply those patches, and keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00177 · 7.0th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2025-10-31T04:15Z
Affected products (1)
ProductVersionsFixed in
veeam/veeam_agent_for_windows≥ 6.0.0.959, < 6.3.2.13026.3.2.1302
References (1)
EPSS history
Timeline
  • 30 OCT 23:33Z
    This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if a system administrator is tricked into restoring a malicious…
    cvelistv5