CVE-2026-112174: Privilege escalation in Enter’s Iperius Backup
Local privilege escalation vulnerability in Iperius Backup 8.8.3, due to insufficient separation between the graphical user interface running with elevated privileges and local users with low privileges. When the backup service is configured to run persistently with Administrator privileges, a local attacker with low privileges can use the native Windows dialogues exposed by the application to run programmes that inherit its elevated context. This allows commands to be executed with SYSTEM or Administrator privileges, depending on the application’s context, and compromises the affected Windows system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Iperius Backupto a version that resolves this vulnerability.Fixed in 8.8.9
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Windows systems running Iperius Backup 8.8.3 are exposed when the backup service is configured to run persistently with Administrator privileges. Exploitation requires an attacker to already have local access as a low-privileged user.
What level of access can an attacker gain?
A low-privileged local attacker can use native Windows dialogs exposed by the elevated application to start programs in the application's elevated context. Depending on that context, this can result in Administrator or SYSTEM-level command execution.
How can administrators reduce exposure if they cannot immediately remediate the issue?
Avoid configuring the backup service to run persistently with Administrator privileges where operationally possible. Restrict local access by low-privileged or untrusted users on affected Windows systems.