Backblaze Client
Monthly
Improper link resolution in the Backblaze Client for Windows allows a local user to render a system unbootable by creating a junction or symbolic link from Backblaze's backup folder to critical Windows OS system files, which the backup process then processes without adequate validation. The vulnerability is scoped to Windows deployments where specific OS-level security controls have been disabled through an administrator-level change. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Improper link resolution in the Backblaze Client for Windows allows a local user to render a system unbootable by creating a junction or symbolic link from Backblaze's backup folder to critical Windows OS system files, which the backup process then processes without adequate validation. The vulnerability is scoped to Windows deployments where specific OS-level security controls have been disabled through an administrator-level change. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.