CVE-2025-55125

Summary

This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file.

Affected Software

VendorProductVersion RangeStatus
VeeamBackup And Recovery13.0.0 <= 13.0.0affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References