---
id: 7182
title: "[CVE-2024-3094] Backdoor in XZ Utils allows RCE: everything you need to know"
cve: CVE-2024-3094
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/cve-2024-3094-critical-rce-vulnerability-found-in-xz-utils"
published_at: "2024-03-29T22:02:58Z"
tags: ["cloud", "rce", "supply-chain", "linux", "vulnerability", "backdoor", "xz-utils", "cve-2024-3094"]
phying_url: "https://phying.com/item/7182"
lang: en
---

# [CVE-2024-3094] Backdoor in XZ Utils allows RCE: everything you need to know

## Summary

Wiz explains CVE-2024-3094, the XZ Utils backdoor in versions 5.6.0 and 5.6.1 that could enable SSH authentication bypass and RCE on certain distros; about 2% of cloud environments were affected.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2024-3094
- **Published:** 2024-03-29T22:02:58Z
- **Original:** https://www.wiz.io/blog/cve-2024-3094-critical-rce-vulnerability-found-in-xz-utils
- **Phying News:** https://phying.com/item/7182