Blog

Security Research

XZ Utils Backdoor — Everything You Need to Know, and What You Can Do

CVE-2024-3094 is a vulnerability discovered in the open-source library XZ Utils that stems from malicious code that was pushed into the library by one of its maintainers.

Executive summary

\r\n CVE-2024-3094 is a vulnerability discovered in the open-source library XZ Utils that stems from malicious code that was pushed into the library by one of its maintainers.

\r\n

\r\n It was originally reported as an SSH authentication bypass backdoor, but further analysis indicates that the backdoor actually enables remote code execution (RCE).

\r\n

\r\n The threat actor started contributing to the XZ project almost two years ago, slowly building credibility until they were given maintainer responsibilities.…