# CVE-2026-58069: Veeam Backup & Replication arbitrary file read in Cloud Connect

Source: https://junglewise.ai/threats/cve-2026-58069-this-vulnerability-in-veeam-backup-replication-allows-an  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-07. Updated: 2026-10-07  
License: CC BY 4.0 with a link back

CVE-2026-58069 · Severity: info · Published 2026-10-07

Veeam Backup & Replication is an enterprise backup and disaster recovery solution that organizations use to protect their data across multiple environments. An authenticated Cloud Connect tenant—a customer using the cloud-based backup service—can read any file on the service provider's host system, potentially exposing sensitive data like configurations, credentials, and backups belonging to other tenants or the provider itself.

Technologies: [Veeam Backup & Replication](https://junglewise.ai/threats/technologies/backup-replication). Vendors: [Veeam](https://junglewise.ai/threats/vendors/veeam).

## Quick answers

**Is CVE-2026-58069 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-58069 being exploited in the wild.

**How severe is CVE-2026-58069?** Informational severity, published 7 October 2026.

**Which products and versions are affected?** Veeam Backup & Replication 12.3.2.4854 and earlier 12.x; 13.0.2.29 and earlier 13.x.

**Is there a fix for CVE-2026-58069?** Yes: fixed in Backup & Replication 13.1 (build 13.1.0.411), 13.0.3 (build 13.0.3.63), 12.3.2 P4 (build 12.3.2.4934). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-58069 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-58069?** Check whether you run Veeam Backup & Replication at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Backup & Replication 13.1 (build 13.1.0.411), 13.0.3 (build 13.0.3.63), 12.3.2 P4 (build 12.3.2.4934)

## Technical details

This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host via a network-based attack. The flaw affects versions 13.0.2.29 and earlier in the 13.x line, and 12.3.2.4854 and earlier in the 12.x line, and requires the attacker to be an authenticated tenant. A successful exploit grants high confidentiality impact on the provider's system.

## Affected products

- Veeam Backup & Replication 12.3.2.4854 and earlier 12.x; 13.0.2.29 and earlier 13.x

## Timeline

- 2026-10-07: disclosed

## References

- [https://www.veeam.com/kb4902](https://www.veeam.com/kb4902)

## Related threats

- [Veeam Backup & Replication authorization bypass in CDP Coordinator](https://junglewise.ai/threats/cve-2026-108142-a-vulnerability-allowing-an-unauthenticated-attacker-to-bypass)
- [Veeam Backup & Replication path traversal in restore](https://junglewise.ai/threats/cve-2026-108141-a-vulnerability-allowing-an-authenticated-user-with-the-restore)
- [Veeam Backup & Replication path traversal via restore operator](https://junglewise.ai/threats/cve-2026-108140-a-vulnerability-allowing-an-authenticated-user-with-the-restore)
- [Veeam Backup & Replication privilege escalation in Enterprise Manager](https://junglewise.ai/threats/cve-2026-93026-this-vulnerability-in-veeam-backup-replication-allows-a-backup)
- [Veeam Backup & Replication insecure deserialization in Mount Service](https://junglewise.ai/threats/cve-2025-64393-this-vulnerability-in-veeam-backup-replication-allows-a-backup)