Vulnerability Description
Duplicacy through 3.2.5 contains a path traversal vulnerability in the restore function that fails to validate entry paths deserialized from snapshot files. Attackers can craft malicious snapshot entries with directory traversal sequences to write files outside the restore directory to arbitrary locations accessible by the restoring user.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/gilbertchen/duplicacy
- https://github.com/gilbertchen/duplicacy/blob/54f97522bff9df8be6797873203310ccbf
- https://github.com/gilbertchen/duplicacy/blob/54f97522bff9df8be6797873203310ccbf
- https://github.com/gilbertchen/duplicacy/issues/692
- https://www.vulncheck.com/advisories/duplicacy-path-traversal-during-restore-via
FAQ
What is CVE-2026-82264?
CVE-2026-82264 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Duplicacy through 3.2.5 contains a path traversal vulnerability in the restore function that fails to validate entry paths deserialized from snapshot files. Attackers can craft malicious snapshot entr...
How severe is CVE-2026-82264?
CVE-2026-82264 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-82264?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.