A path‑traversal flaw in Veeam Backup and Replication allows a user who has the Restore Operator role and who can influence the content of a backed‑up NAS share to write attacker‑controlled files to any location on the backup server. This flaw can corrupt critical backup data or introduce malicious files into the server filesystem, potentially leading to further compromise or data loss.

Veeam Backup and Replication; versions not specified.

The vulnerability earns a CVSS score of 5.9, indicating moderate severity. No EPSS data is available and the flaw is not listed in the CISA KEV catalog. Attack requires authenticated access with the Restore Operator role and control over a backed‑up NAS share, so the threat is mainly an insider or credential‑abused scenario. Exploitation can be performed through relative path traversal in backup operations, allowing the attacker to write arbitrary files to any path on the backup server.