Iperius Backup 6.1.0 includes a privilege‑escalation flaw that allows users with ordinary local privileges to create backup jobs that execute arbitrary programs. The software runs any configured batch file or executable under the rights of the backup service account, which is typically Local System or an Administrator. As a result, an attacker can run code with full system privileges, compromising confidentiality, integrity, and availability. The weakness is identified as CWE‑520, denoting improper handling of privileged execution.

The vulnerability affects Iperius Backup version 6.1.0 distributed by Iperius. No other product versions or related products are listed as affected in the available data, so the impact is limited to installations running this specific version.

The flaw carries a CVSS score of 8.6, indicating high severity. The attack can be carried out only when an attacker has local access to create or modify backup jobs; based on the description, the likely attack vector is local. Because the exploit does not rely on remote input and no EPSS score is available, the probability of widespread exploitation is uncertain, and the component is not listed in the CISA KEV catalogue.