USN-9049-1: btrbk vulnerability
Published Nov 11, 2026
·Updated
It was discovered that btrbk incorrectly filtered SSH commands received from remote hosts. A remote attacker could possibly use this issue to execute arbitrary commands.
Affected Software
2 affected componentsFixes available
ubuntu/btrbk<0.26.0-1ubuntu0.1~esm1
0.26.0-1ubuntu0.1~esm1
ubuntu/btrbk<0.27.1-1ubuntu0.1~esm1
0.27.1-1ubuntu0.1~esm1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/btrbkto a version that resolves this vulnerability.Fixed in 0.26.0-1ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/btrbkto a version that resolves this vulnerability.Fixed in 0.27.1-1ubuntu0.1~esm1
Event History
Nov 11, 2026
Advisory Published
via OSV·06:31 PM
Data Sourced
via OSV·06:31 PM
DescriptionAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker must be able to send SSH commands from a remote host to the affected btrbk setup.
2
What is the potential impact of successful exploitation?
A remote attacker could possibly execute arbitrary commands because SSH commands received from remote hosts were not filtered correctly.