high7.0
CVE-2026-76159
Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions before v2.4.0.0 allows a local low-privileg…
Impact
Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions before v2.4.0.0 allows a local low-privileged attacker to escalate privileges to NT AUTHORITY\SYSTEM via an attacker-controlled preload.json file.
Affected products
| Product | Affected versions |
|---|---|
| Duplicati For Windows | before 2.4.0.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.