Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-29855. PoCs published by sinsinology.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass in Veeam Recovery Orchestrator by generating and spraying JWT tokens with a known secret key. It leverages a time-based brute-force approach to find a valid token within a specified epoch range.
Description
Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator
Exploits (1)
nomisec
WORKING POC
20 stars
by sinsinology · poc
https://github.com/sinsinology/CVE-2024-29855
This exploit demonstrates an authentication bypass in Veeam Recovery Orchestrator by generating and spraying JWT tokens with a known secret key. It leverages a time-based brute-force approach to find a valid token within a specified epoch range.
Classification
Working Poc 100%
Attack Type
Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target:
Veeam Recovery Orchestrator < 7.1.0.230, < 7.0.0.379
No auth needed
Prerequisites:
Network access to the target Veeam Recovery Orchestrator instance · Valid username in the format 'user@domain' or 'domain\user' · Known JWT secret key
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (1)
Core 1
Core References
Vendor Advisory
https://www.veeam.com/kb4585
Scores
CVSS v3
9.0
EPSS
0.2163
EPSS Percentile
97.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-798
Status
published
Products (1)
veeam/recovery_orchestrator
< 7.0.0.379
Published
Jun 11, 2024
Tracked Since
Feb 18, 2026