Release Information for Veeam Backup & Replication 13 and Updates

13.0.1.1071

2026-01-06

Security

Vulnerabilities

• CVE-2025-55125 | Severity: High (7.2)
  This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file.
• CVE-2025-59468 | Severity: Medium (6.7)
  This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a malicious password parameter.
• CVE-2025-59469 | Severity: High (7.2)
  This vulnerability allows a Backup or Tape Operator to write files as root.
• CVE-2025-59470 | Severity: High (9.0)
  This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.

Resolved issues

General

• Excessive audit failure events are generated within the Windows Event Log during normal operation of the Veeam.Backup.IdentityService.exe process.

Microsoft Hyper-V

• During guest interaction proxy selection, the Hyper-V host is skipped, resulting in the Veeam Backup Server being used instead.
• Hyper-V replication jobs fail during incremental runs with the error:

  hexadecimal value 0x00, is an invalid character.
  

• The replication job wizard does not save custom destination paths after editing, causing the destination path to reset to the default value instead of retaining the user-defined path.
• Editing a standalone Hyper‑V host fails with the error:

  Creating configuration database records. Error: Host [] does not exist in database
  

  or
  

  Unable to cast object of type 'System.DBNull' to type 'System.String'
  

Guest processing

• Backup jobs for Linux VMs fail with the following error when application-aware processing is disabled and indexing is enabled:

  Cannot find Linux guest credentials.
  

Unstructured data

• Copy Backup and Health Check sessions cannot be stopped once initiated.
• The Get-VBRUnstructuredBackupFLRItem -Recurse PowerShell cmdlet intermittently fails to return all items.
• Old backups fail to be imported with the errors:

  Attempted to divide by zero
  

  and
  

  Failed to deserialize long-term meta
  

• It is impossible to create a new directory in an Instant Recovery share when using Samba server version 4.22.4 on the Linux mount server.

Veeam Agent for Windows 13.0.1.1009

• The Veeam Agent for Windows executable setup incorrectly blocked installation on Windows 10 21H2 LTSC IoT.
• An unexpected synthetic full backup is triggered during a scheduled job launch of Veeam Agent for Windows, even if no previous backup sessions were missed.
• After encryption is enabled, local backup chain transformation, after a Health Check, fails with the error:

  FOREIGN KEY constraint failed
  

Veeam Agent for Linux 13.0.1.203

• Added compatibility for RHEL 9.7 & 10.1, Rocky Linux 9.7 & 10.1, AlmaLinux 9.7 & 10.1, and SLES 16.0 Linux distributions.

Object Storage Repository

• The immutability setting “For the minimum immutability duration only” was not correctly enforced for GFS backups, resulting in longer-than-intended immutability periods.
  
  Note: This update corrects the enforcement. To avoid unexpectedly shortening immutability for existing GFS backups, all existing object storage repositories will be automatically set to “For the entire duration of their retention policy.” New repositories will not be affected. Backup administrators can revert existing repositories to “For the minimum immutability duration only” after reviewing which restore points will be impacted by the corrected behavior.

Tape

• The Online and Offline subfolders for Media in the Tape Infrastructure node are missing.
• Changes to the state of the Archive Incremental checkbox are not saved after editing and closing the backup to tape job.
• The "This day" option for a monthly schedule cannot be set correctly, and the selected months are not applied.
• File backup to tape jobs hang during incremental backup operations.
• Tenant restore from tape fails with the error:

  Cannot find full backup.
  

• Multiple yearly storages are missing under Backups → Tape in the console, despite being displayed correctly under tape properties.

Veeam Plug-In for Kasten

• K10 instances cannot be edited or rescanned after upgrading from version 12.3 to 13.0.1.
• Sync failed after upgrading from version 12.3 to 13.0.1 when K10 instances have certain specific policies configured.

Microsoft EntraID

• Starting a Microsoft Entra ID restore from an encrypted backup after upgrading from version 12.3.2 to 13.0.1 results in the error:

  Cannot find Microsoft Entra ID backup repository for the backup custom EntraID job.
  

Cloud Connect

• The license report for Cloud Connect providers incorrectly displays 0 points for tenant consumption.