CVE-2026-62943

Name of the Vulnerable Software and Affected Versions btrbk versions 0.29.0 through 0.32.6

Description The ssh filter btrbk.sh script constructs allow stream match using a start anchor but lacks an end-of-string anchor for the complete command. This allows a user restricted by an authorized keys forced command to append a trailing pipe command after a valid btrbk command prefix. Consequently, the allowlist is bypassed, enabling the execution of arbitrary commands with the privileges of the backup-target SSH account. This issue only affects deployments utilizing ssh filter btrbk.sh in authorized keys.

Recommendations Update to version 0.32.7.