CVE-2026-82264

Name of the Vulnerable Software and Affected Versions Duplicacy versions prior to 3.2.6

Description A path traversal issue exists in the restore function, which fails to validate entry paths deserialized from snapshot files. This allows attackers to create malicious snapshot entries using directory traversal sequences to write files to arbitrary locations outside the intended restore directory, provided the locations are accessible by the user performing the restoration.

Recommendations Update to a version newer than 3.2.5.