Privileged File Access Flaw in Veeam Software
CVE-2025-59469

9CRITICAL

Key Information:

Vendor

Veeam
Status
Backup And Recovery
Vendor
CVE Published:
8 January 2026

What is CVE-2025-59469?

A vulnerability in Veeam Backup & Replication allows Backup or Tape Operators to write files with root privileges. This flaw can be exploited by an authenticated user, potentially leading to unauthorized modifications of critical system files or configurations. Users of the affected versions should review security practices and apply necessary patches to mitigate risks.

Affected Version(s)

Backup and Recovery 13.0.0

References

https://www.veeam.com/kb4792

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.