CVE-2019-25608 Iperius Backup 6.1.0 Privilege Escalation via Backup Job
Low-privilege users can escalate privileges and execute arbitrary code by configuring malicious backup jobs in Iperius Backup.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-25608?
CVE-2019-25608 is a high-severity vulnerability in Iperius Backup, published on 22 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Iperius Backup 6.1.0 contains a privilege escalation vulnerability that allows low-privilege users to execute arbitrary programs with elevated privileges by creating backup jobs. Attackers can configure backup jobs to execute malicious batch files or programs before or after backup operations, which run with the privileges of the Iperius Backup Service account (Local System or Administrator), enabling privilege escalation and arbitrary code execution.
Weakness: CWE-520
Which versions are affected by CVE-2019-25608?
How do I fix CVE-2019-25608?
No fix has been published for CVE-2019-25608 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-25608 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-25608 exists.
Sources
Also known as GHSA-25hq-fgwv-mq8p.