High severity7.8NVD Advisory· Published Dec 1, 2017· Updated Jun 17, 2026

CVE-2017-16895

Description

The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arqbackup/Arq2 versions
cpe:2.3:a:arqbackup:arq:*:*:*:*:*:macos:*:*+ 1 more
- cpe:2.3:a:arqbackup:arq:*:*:*:*:*:macos:*:*range: >=5.0.0.65,<5.10
- (no CPE)range: <5.10

Patches

Vulnerability mechanics

References

m4.rkw.io/blog/cve201716895-local-root-privesc-in-arq-backup--597.htmlnvdThird Party Advisory
www.exploit-db.com/exploits/43216/nvdThird Party AdvisoryVDB Entry
www.arqbackup.com/blog/arq-mac-import-security-update/nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000