Veeam Backup & Replication Cloud Connect Authenticated File Read
CVE-2026-58069 Published on October 7, 2026
This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host.
Weakness Type
What is a Directory traversal Vulnerability?
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
CVE-2026-58069 has been classified to as a Directory traversal vulnerability or weakness.
Affected Versions
Veeam Backup and Replication:- Version 12, <= 12.3.2 is affected.
- Version 13, <= 13.0.3 is affected.