Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2026-19820

Backblaze Client for Windows Improper Link Resolution Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Bugcrowd

Description

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows OS security controls. This vulnerability is due to improper link resolution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Backblaze Backblaze Client

Default version status: unaffected

  • 10.0.0.1029affected
  • 10.0.1.1037affected
  • 10.0.2.1047affected

References