Vulnerabilities

TI-2026-85659 CVE-2026-62268

borg extract can modify files outside the extraction directory

LOW 23

borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption.

CVSS 4.0MEDIUM 5.3 Local High privileges User interaction EPSS 0.00159 Published 2026-11-05 Fixed in 1.4.5, 2.0.0b22 CWE-59

TI-2023-18605 CVE-2023-36811 · GHSA-8fjr-hghr-4m99

LOW 20

borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.0011 Published 2023-08-30 Fixed in 1.2.5 CWE-347

TI-2017-11651 CVE-2017-15914 · GHSA-8q8v-28rm-qw4w

MEDIUM 42

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01955 Published 2018-02-08 Fixed in 1.1.3 CWE-284