# CVE-2026-108141: Veeam Backup & Replication path traversal in restore

Source: https://junglewise.ai/threats/cve-2026-108141-a-vulnerability-allowing-an-authenticated-user-with-the-restore  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-27. Updated: 2026-10-27  
License: CC BY 4.0 with a link back

CVE-2026-108141 · Severity: info · Published 2026-10-27

Veeam Backup & Replication is a backup and disaster recovery platform used by organizations to protect critical data. An authenticated user with Restore Operator privileges who controls a backed-up NAS share can write malicious files to arbitrary locations on the backup server, potentially compromising the integrity of backup systems and enabling further attacks.

Technologies: [Veeam Backup & Replication](https://junglewise.ai/threats/technologies/backup-replication). Vendors: [Veeam](https://junglewise.ai/threats/vendors/veeam).

## Quick answers

**Is CVE-2026-108141 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-108141 being exploited in the wild.

**How severe is CVE-2026-108141?** Informational severity, published 27 October 2026.

**Which products and versions are affected?** Veeam Backup & Replication 13.1.1.18 and all earlier 13.1 builds; 13.0.2.29 and all earlier 13.0 builds.

**Is there a fix for CVE-2026-108141?** Yes: fixed in Veeam Backup & Replication 13.1.2 (build 13.1.2.57); Veeam Backup & Replication 13.0.3 (build 13.0.3.63). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-108141 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-108141?** Check whether you run Veeam Backup & Replication at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Veeam Backup & Replication 13.1.2 (build 13.1.2.57); Veeam Backup & Replication 13.0.3 (build 13.0.3.63)

## Technical details

The vulnerability is a relative path traversal flaw affecting the restore operation of Veeam Backup & Replication. An authenticated attacker with Restore Operator role can exploit this by controlling the contents of a backed-up NAS share to traverse directories and write files to arbitrary paths on the backup server. This requires network access and Restore Operator privileges, but not user interaction.

## Affected products

- Veeam Backup & Replication 13.1.1.18 and all earlier 13.1 builds; 13.0.2.29 and all earlier 13.0 builds

## Timeline

- 2026-10-27: disclosed

## References

- [https://www.veeam.com/kb4948](https://www.veeam.com/kb4948)

## Related threats

- [Veeam Backup & Replication authorization bypass in CDP Coordinator](https://junglewise.ai/threats/cve-2026-108142-a-vulnerability-allowing-an-unauthenticated-attacker-to-bypass)
- [Veeam Backup & Replication path traversal via restore operator](https://junglewise.ai/threats/cve-2026-108140-a-vulnerability-allowing-an-authenticated-user-with-the-restore)
- [Veeam Backup & Replication privilege escalation in Enterprise Manager](https://junglewise.ai/threats/cve-2026-93026-this-vulnerability-in-veeam-backup-replication-allows-a-backup)
- [Veeam Backup & Replication arbitrary file read in Cloud Connect](https://junglewise.ai/threats/cve-2026-58069-this-vulnerability-in-veeam-backup-replication-allows-an)
- [Veeam Backup & Replication insecure deserialization in Mount Service](https://junglewise.ai/threats/cve-2025-64393-this-vulnerability-in-veeam-backup-replication-allows-a-backup)