CVE-2026-16157 | Duplicati 2.3.0.1 LocalSystem service permission assignment

July 22, 2026 Yanac

A vulnerability marked as very critical has been reported in Duplicati 2.3.0.1. Affected by this vulnerability is an unknown functionality of the component LocalSystem service. This manipulation causes incorrect permission assignment.

This vulnerability appears as CVE-2026-16157. The attack requires local access. There is no available exploit.VulDB Recent EntriesRead More