CVE-2026-32997

Vulnerability

The vulnerability exists in Veeam Backup & Replication version 13.0.1.2067 and all earlier version 13 builds on Linux-based Veeam Software Appliance [1]. An authenticated user with the Backup Administrator role can write arbitrary files to the server filesystem.

Exploitation

An attacker must have network access to the Veeam Backup & Replication server and possess valid credentials with the Backup Administrator role [1]. No user interaction is required. The attacker can exploit this by sending crafted requests to write files to arbitrary locations.

Impact

Successful exploitation allows the attacker to write arbitrary files, potentially leading to remote code execution, privilege escalation, or complete compromise of the backup server. The CVSS v3.1 score is 8.6 (High) with high impact on confidentiality, integrity, and availability [1].

Mitigation

Veeam has resolved this vulnerability in Veeam Backup & Replication version 13.0.2 [1]. Users should upgrade to this version or later. No workarounds are mentioned in the available reference. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog as of publication.