CVE-2017-15914: Borgbackup Borg

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.

Affected products

• Borgbackup Borg: from 1.1.0, before 1.1.3 (fixed in 1.1.3)

Published 2018-02-08. Last modified 2026-06-17.