CVE-2023-36811

CVE-2023-36811 is a medium-severity cryptographic authentication flaw in borgbackup, an open-source deduplicating archiver. An attacker with write access to the repository and the ability to insert files into backups could potentially fake archives, leading to indirect data loss. The vulnerability has a CVSS score of 4.7 (Medium) due to its local attack vector and high integrity impact, though it does not disclose plaintext. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed on the KEV catalog.