CVE Field Guide
About Us
CVE-2025-59469
PUBLISHED
Assigner:
hackerone
Reserved:
16.09.2025
Published:
08.01.2026
Updated:
09.01.2026
This vulnerability allows a Backup or Tape Operator to write files as root.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
CVSS Score:
9
CVSS score
9
Attack Vector
Network
Scope
Changed
Attack Complexity
Low
Confidentiality Impact
High
Privileges Required
High
Integrity Impact
High
User Interaction
None
Availability Impact
Low
CVSS 3.1
Product Status
Vendor
Veeam
Product
Backup and Recovery
Versions
Default:
unaffected
affected from 13.0.0 to 13.0.0 (incl.)
References
https://www.veeam.com/kb4792