High · published January 8, 2026
⚡ Just one malicious backup config file can hand a Backup Operator the keys to the kingdom! This vulnerability allows them to execute commands as root from anywhere. 🔥 Think of it like a hotel employee who can not only access your room but also check in all their friends at will — that's the kind of power this vulnerability gives to an attacker with the right access. 🎭 If exploited, a Backup or Tape Operator could run any code they choose, potentially leading to a complete system takeover. This means they could access sensitive data, install malicious software, or even erase crucial backups — all while masquerading as a legitimate user!
Think of it like a hotel employee who can not only access your room but also check in all their friends at will — that's the kind of power this vulnerability gives to an attacker with the right access. 🎭 This vulnerability arises from a flaw that allows Backup Operators to create a malicious backup configuration file, which the system executes with root privileges, granting full control over the system.
If exploited, a Backup or Tape Operator could run any code they choose, potentially leading to a complete system takeover. This means they could access sensitive data, install malicious software, or even erase crucial backups — all while masquerading as a legitimate user! To mitigate this, review and restrict the permissions of Backup Operators, implement strict validation for configuration files, and apply any available patches or updates from your software vendor as soon as possible. Regular audits of backup configurations can also help catch potential issues early! You've got this! With a few adjustments and monitoring, you can protect your system from this vulnerability. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| veeam/veeam_backup_\&_replication | ≥ 13.0.0.4967, < 13.0.1.1071 | 13.0.1.1071 |