btrbk is a tool for creating snapshots and remote backups of Btrfs subvolumes. From 0.29.0 until 0.32.7, btrbk's ssh_filter_btrbk.sh constructs allow_stream_match with a start anchor but without an end-of-string anchor for the complete command. A user restricted through an authorized_keys forced command can append a trailing pipe command after a valid btrbk command prefix, bypassing the allowlist and executing arbitrary commands with the privileges of the backup-target SSH account. Deployments that do not use ssh_filter_btrbk.sh in authorized_keys are not affected. This issue is fixed in version 0.32.7.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - btrbk is a tool for creating snapshots and remote backups of Btrfs subvolumes. From 0.29.0 until 0.32.7,     btrbk's ssh_filter_btrbk.sh constructs allow_stream_match with a start anchor but without an end-of-string     anchor for the complete command. A user restricted through an authorized_keys forced command can append a     trailing pipe command after a valid btrbk command prefix, bypassing the allowlist and executing arbitrary     commands with the privileges of the backup-target SSH account. Deployments that do not use     ssh_filter_btrbk.sh in authorized_keys are not affected. This issue is fixed in version 0.32.7.
    (CVE-2026-62943)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1528cb06a7 advisory.

    Update to 0.32.7 (RHBZ#2502632) which includes fix for CVE-2026-62943

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-131c82812a advisory.

    Update to 0.32.7 (RHBZ#2502632) which includes fix for CVE-2026-62943

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
348559	Linux Distros Unpatched Vulnerability : CVE-2026-62943	Nessus	Misc.	Local	high
330526	Fedora 43 : btrbk (2026-1528cb06a7)	Nessus	Fedora Local Security Checks	Local	high
328870	Fedora 44 : btrbk (2026-131c82812a)	Nessus	Fedora Local Security Checks	Local	high

Detections

Analytics

CVE-2026-62943

high

Tenable Plugins

high

high

high