CVE-2025-41757 — Arbitrary Write with ubr-restore
A low-privileged remote attacker can abuse the backup restore functionality of UBR (ubr-restore) which runs with elevated privileges and does not validate the contents of the ba…
Published: 2026-03-09 · CVSS: 8.8 · CVSS 3.1
A low-privileged remote attacker can abuse the backup restore functionality of UBR (ubr-restore) which runs with elevated privileges and does not validate the contents of the backup archive to create or overwrite arbitrary files anywhere on the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7