CVE-2019-4001: Druva Insync

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code.

Affected products

• Druva Insync: version 6.5.0 only

Published 2020-03-24. Last modified 2026-06-17.