Critical · published October 31, 2025
🚨 An authenticated domain user can unleash chaos with this RCE flaw in Veeam Backup & Replication's Mount service! 🔥 Think of it like a trusted guest at a party who, instead of sipping punch, decides to rearrange the furniture and mess with the electricity. Just because they’re invited doesn’t mean they should have access to everything! An attacker with domain access could execute arbitrary code on the backup infrastructure hosts, potentially leading to data loss, system downtime, or unauthorized access to sensitive information. That’s like giving someone the keys to your castle and letting them redecorate – with fiery results!
Think of it like a trusted guest at a party who, instead of sipping punch, decides to rearrange the furniture and mess with the electricity. Just because they’re invited doesn’t mean they should have access to everything! This vulnerability allows an authenticated domain user to execute remote code on the Backup infrastructure hosts through improper handling in the Mount service of Veeam Backup & Replication.
An attacker with domain access could execute arbitrary code on the backup infrastructure hosts, potentially leading to data loss, system downtime, or unauthorized access to sensitive information. That’s like giving someone the keys to your castle and letting them redecorate – with fiery results! Immediately update to the latest version of Veeam Backup & Replication where this vulnerability is patched. Ensure that only trusted domain users have access and consider implementing stricter access controls. Regularly audit user permissions to minimize exposure. You’ve got this! Follow these steps, and you’ll have your defenses up in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| veeam/veeam_backup_\&_replication | ≥ 12.0.0.1402, < 12.3.2.4165 | 12.3.2.4165 |