CVE-2026-32996: Veeam Agent for Microsoft Windows local privilege escalation

CVE-2026-32996 · Severity: info · CVSS 7.3 · Published 2026-05-28

Veeam Agent for Microsoft Windows, a backup and data protection solution, contains a vulnerability that allows a user with low-level access to gain administrative control over the local system. This could allow an attacker who has already gained a foothold on a computer to take full control of the device, potentially leading to data theft or the disabling of security and backup services. Organizations should update to the latest version to prevent unauthorized privilege escalation.

Technologies: Veeam Agent for Microsoft Windows. Vendors: Veeam.

Quick answers

Is CVE-2026-32996 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-32996 being exploited in the wild.
How severe is CVE-2026-32996?
Informational severity, with a CVSS score of 7.3, published 28 May 2026.
Which products and versions are affected?
Veeam Agent for Microsoft Windows 13.0.1.2067 and all earlier version 13 builds.
Is there a fix for CVE-2026-32996?
A patch was published on 2026-05-27: Fixed in version 13.0.2.29 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-32996 attacked?
It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-32996?
Check whether you run Veeam Agent for Microsoft Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A local privilege escalation vulnerability exists in Veeam Agent for Microsoft Windows due to the insertion of sensitive information into log files (CWE-532). An attacker with local access and low-level privileges can exploit this flaw to elevate their permissions to a higher level, potentially gaining full system control. The vulnerability affects version 13.0.1.2067 and all earlier version 13 builds. The issue is resolved in Veeam Backup & Replication 13.0.2.29.

Affected products

  • Veeam Agent for Microsoft Windows 13.0.1.2067 and all earlier version 13 builds

Timeline

  • 2026-05-27: patched: Fixed in version 13.0.2.29
  • 2026-05-27: advisory: Veeam KB4852 published
  • 2026-05-28: disclosed: CVE published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.