Path Traversal Vulnerability in Veeam Backup and Replication Products

CVE-2026-108141

What is CVE-2026-108141?

This vulnerability permits an authenticated user assigned the Restore Operator role, who has control over the contents of a backed-up NAS share, to exploit the system by writing malicious files to arbitrary paths on the backup server via relative path traversal techniques. This poses a risk of unauthorized access and potential exploitation of backup data, highlighting the importance of robust security measures and regular audits of user roles and permissions.

References