Executive brief
Veeam Agent for Microsoft Windows, a backup and data protection solution, contains a vulnerability that allows a user with low-level access to gain administrative control over the local system. This could allow an attacker who has already gained a foothold on a computer to take full control of the device, potentially leading to data theft or the disabling of security and backup services. Organizations should update to the latest version to prevent unauthorized privilege escalation.
Technical details
A local privilege escalation vulnerability exists in Veeam Agent for Microsoft Windows due to the insertion of sensitive information into log files (CWE-532). An attacker with local access and low-level privileges can exploit this flaw to elevate their permissions to a higher level, potentially gaining full system control. The vulnerability affects version 13.0.1.2067 and all earlier version 13 builds. The issue is resolved in Veeam Backup & Replication 13.0.2.29.
Affected products
- Veeam Agent for Microsoft Windows 13.0.1.2067 and all earlier version 13 builds
Timeline
- 2026-05-27: patched: Fixed in version 13.0.2.29
- 2026-05-27: advisory: Veeam KB4852 published
- 2026-05-28: disclosed: CVE published to NVD