Vulnerabilities

TI-2026-16071 CVE-2026-19820 · GHSA-wf7j-r93f-5cvm

Backblaze Client for Windows Improper Link Resolution Vulnerability

LOW 33

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup.

CVSS 4.0MEDIUM 5.8 Network No auth No interaction EPSS 0.0049 Published 2026-09-01 No fix listed CWE-59

TI-2022-07705 CVE-2022-23653 · GHSA-8wr4-2wm6-w3pr

B2 Command Line Tool TOCTOU application key disclosure

LOW 21

B2 Command Line Tool is the official command line tool for the backblaze cloud storage service.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.0021 Published 2022-02-23 Fixed in 3.2.1 CWE-367

TI-2022-07703 CVE-2022-23651 · GHSA-p867-fxfr-ph2w

b2-sdk-python TOCTOU application key disclosure

LOW 21

b2-sdk-python is a python library to access cloud storage provided by backblaze.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00217 Published 2022-02-23 Fixed in 1.14.1 CWE-367

TI-2020-06707 CVE-2020-8290 · GHSA-mfc8-4qmg-g3x6

Improper privilege management in Backblaze

LOW 35

Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit` helper due to lack of permission handling and validation before creation of client update directori…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00589 Published 2020-12-27 Fixed in 7.0.0.439 CWE-269

TI-2020-06706 CVE-2020-8289 · GHSA-7f55-fqw6-8jjp

Improper certificate validation in Backblaze

MEDIUM 42

Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in `bztransmit` helper due to hardcoded whitelist of strings in URLs where validation is disable…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.04696 Published 2020-12-27 No fix listed CWE-295