High severity8.0NVD Advisory· Published Sep 4, 2026· Updated Sep 10, 2026
CVE-2026-53932
CVE-2026-53932
Description
laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during database restore. This issue has been patched in version 1.9.4.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
wnx/laravel-backup-restorePackagist | < 1.9.4 | 1.9.4 |
Affected products
1- Range: <1.9.4
Patches
Vulnerability mechanics
References
5- github.com/advisories/GHSA-w9mx-xmg4-gc4rghsaADVISORY
- github.com/stefanzweifel/laravel-backup-restore/security/advisories/GHSA-w9mx-xmg4-gc4rnvdWEB
- github.com/stefanzweifel/laravel-backup-restore/commit/a73f6c3dfd57c5efbc46cce4e93ed033bedce8b0nvd
- github.com/stefanzweifel/laravel-backup-restore/pull/116nvd
- github.com/stefanzweifel/laravel-backup-restore/releases/tag/v1.9.4nvd
News mentions
0No linked articles in our index yet.