This vulnerability exists in the Veeam Updater component of the Veeam Backup and Replication appliance. It is classified as a path traversal issue (CWE-22) that enables a local user with high privileges to escalate their access to root level on the underlying OS. The CVSS 4.0 base score is 8.4, reflecting high impact and exploitability with low complexity and no required user interaction. The vulnerability is not known to be exploited in the wild. No vendor advisory or patch information is currently available to confirm remediation status.

A local user with elevated privileges can exploit this vulnerability to gain root-level access to the underlying operating system of the Veeam Backup and Replication appliance. This can lead to full system compromise, allowing the attacker to control the appliance and potentially access or manipulate backup data and system configurations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to the Veeam Updater component.