CVE-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal
An attacker can read arbitrary files via path traversal, potentially leading to remote code execution due to exposed cleartext credentials in NAKIVO Backup & Replication.
- Exploited in the wild
- Since 19 Mar 2025
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-48248?
CVE-2024-48248 is a high-severity path traversal vulnerability in NAKIVO Backup & Replication Director, published on 4 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).
Weakness: CWE-36
Which versions are affected by CVE-2024-48248?
It affects 1 product.
Products include Nakivo Backup \& Replication Director.
How do I fix CVE-2024-48248?
No fix has been published for CVE-2024-48248 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 9 Apr 2025.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2024-48248 being exploited?
Yes. Attackers have exploited CVE-2024-48248 in the wild since at least 19 Mar 2025.
Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.
Other vulnerabilities in NAKIVO Backup & Replication Director
Sources
Also known as GHSA-8j8g-6gw9-rjrf.