CVE-2025-24286

Medium · 4.9

CVSS

4.9

EPSS

19.1%

Published

Jun 19, 2025

CISA due date

—

The record

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code.

Ecosystem	Package	Introduced	Fixed