How do I check whether I am affected by CVE-2026-105477?

- Check the installed Veeam Agent for Linux version on each Linux host with `veeamconfig --version` (command assumed from Veeam product usage; sources do not confirm it) - Check whether the agent is managed by a Veeam Backup & Replication server (sources do not say how to verify this)

What is the fix for CVE-2026-105477?

- Upgrade Veeam Agent for Linux to the fixed release named in the Veeam advisory (version unknown from the sources) - Review local accounts with shell access on managed Linux hosts until patched

Who is not affected by CVE-2026-105477?

Not affected if: not-managed-by-backup-replication, standalone-agent.

Live › vulnerability › CVE-2026-105477

Go to dashboard

high7.3Infrastructure

Veeam Agent for Linux: local privilege escalation to root on managed hosts

Veeam Agent for Linux has a flaw that lets a local user escalate their privileges. Only installations managed by a Veeam Backup & Replication instance are affected, according to the NVD description.

Summary written from the sources below. Check the originals before acting.

CVSS 4.0

7.3

high

scored by [email protected]

known so far3 of 6

missing: versions, primary source, exploitation

First public: Oct 27, 2026 UTC
Last modified: Oct 27, 2026
Status: open
Known exploitation: None reported
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-27 17:32 UTC. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: No reports yet.
Needs login: Yes.
Needs a special setup: Yes.
Reachable from: local.
Worst case: Local user gains elevated privileges on the Linux host.
CVSS said: 7.3. The facts above say medium; we keep the sources' high until an analyst looks.

Who is affected

Linux hosts running Veeam Agent for Linux that are managed by a Veeam Backup & Replication instance. Standalone agent installations that are not managed by Backup & Replication are not affected, according to the description. Systems without the agent can skip it.

Know the next one before it finds you.

Add to Slack

Live › vulnerability › CVE-2026-105477

Go to dashboard

high7.3Infrastructure

Veeam Agent for Linux: local privilege escalation to root on managed hosts

Veeam Agent for Linux has a flaw that lets a local user escalate their privileges. Only installations managed by a Veeam Backup & Replication instance are affected, according to the NVD description.

Summary written from the sources below. Check the originals before acting.

CVSS 4.0

7.3

high

scored by [email protected]

known so far3 of 6

missing: versions, primary source, exploitation

First public: Oct 27, 2026 UTC
Last modified: Oct 27, 2026
Status: open
Known exploitation: None reported
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-27 17:32 UTC. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: No reports yet.
Needs login: Yes.
Needs a special setup: Yes.
Reachable from: local.
Worst case: Local user gains elevated privileges on the Linux host.
CVSS said: 7.3. The facts above say medium; we keep the sources' high until an analyst looks.

Who is affected

Know the next one before it finds you.

Add to Slack

Veeam Agent for Linux: local privilege escalation to root on managed hosts

Why it is high, and not just CVSS

Who is affected

Know the next one before it finds you.

Veeam Agent for Linux: local privilege escalation to root on managed hosts

Why it is high, and not just CVSS

Who is affected

Know the next one before it finds you.

How to check

The fix

Who had it, and when

What the sources say, verbatim

Sources