Review
borgbackup
CVE published 2026-10-15
CVE-2026-62268
A maliciously crafted archive could cause borg extract to modify out-of-tree files. This issue affects borg releases before 1.4.5 and 2.0.0 betas before b22. The vulnerability allows attackers with repository access and borg keys to potentially overwrite or delete files outside the extraction directory using specially crafted archives. Defenders should verify their borg installation and ensure it is up-to [truncated]