CVE-2016-10100: Borg

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Borg (aka BorgBackup) before 1.0.9 has a flaw in the way duplicate archive names were processed during manifest recovery, potentially allowing an attacker to overwrite an archive.

Affected products

• Borg Borg: up to and including 1.0.8

Published 2017-01-02. Last modified 2026-06-17.