Skip to content
OpenAdvisories

Package · Go

github.com/kopia/kopia

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-45695

    Kopia: Unauthenticated RCE via SSH ProxyCommand Injection when --insecure --without-password is used

    Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, client-side end-to-end encryption, compression, and data deduplication. Prior to 0.23.0, Kopia's HTTP server started with --without-password accepts unauthentic…

    kopia kopia github.com/kopia/kopia Go