Live › vulnerability › CVE-2026-108141
Go to dashboardAn authenticated user with the Restore Operator role who also controls the contents of a backed-up NAS share can write attacker-controlled files to an arbitrary path on the backup server through relative path traversal. The sources do not name the affected backup product or versions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:32 UTC. All times on this page are UTC.
Teams that run a backup server that restores data from NAS shares and grants the Restore Operator role to users. Exposure requires that the NAS share contents are attacker-influenced, so installations where only trusted administrators manage backed-up shares have lower risk. The sources do not name the product, so the specific affected deployments cannot be confirmed from the text.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.
This page as .md · .json · in your agent: get_signal("CVE-2026-108141")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.