Home › Entities › Backdoor › XZ Utils backdoor

XZ Utils backdoor

backdoor discovered in 2024
Event Backdoor Q125219823

Facts

9 properties
Instance of
backdoor, malware, cyberattack, named vulnerability, Trojan horse[3][4][5][6]
Publication date
March 29, 2024[9]
Official website
tukaani.org[10]
Depends on software
XZ Utils[12]
Discoverer or inventor
Andres Freund[2]
Has part(s) of the class
Embedded Malicious Code[13]
Perpetrator
Jia Tan[14]
Proved by
Andres Freund[11]
Time of discovery or invention
March 29, 2024, March 28, 2024[7][8]
🏷️ Also known as
en XZ Backdoor en XZ Utils backdoor en CVE-2024-3094 cs Zadní vrátka v XZ Utils de CVE-2024-3094 de XZorcist de XZ Utils Backdoor es Ataque por puerta trasera a XZ Utils fr backdoor d'XZ Utils fr attaque de la chaîne logistique Linux par XZ fr attaque de XZ Utils par porte dérobée fr Attaque d'XZ fr Attaque d'XZ Utils fr CVE-2024-3094 fr porte dérobée XZ pt CVE-2024-3094 pt XZ Backdoor pt XZ Utils backdoor ru Бэкдор в XZ ru Бэкдор в XZ Utils
🔖 Identifiers · 4
CWE ID
506
Common Vulnerabilities and Exposures ID
CVE-2024-3094
Described at URL
boehs.org, gist.github.com, www.cisa.gov, arstechnica.com, www.heise.de, gist.github.com, tukaani.org
Google Knowledge Graph ID
/g/11vwq50rls

Report an error or request removal Lineage (PROV-JSON)

🔗 Connections
Instance of 4
malware, Trojan horse, backdoor, cyberattack
Press Enter · cited answer in seconds

Summary

XZ Utils backdoor is a backdoor[1].

References

Programmatic citations — every numbered marker resolves to a verifiable graph row below.

Direct Wikidata claims

  1. [3] ↑ . wikidata.org.
  2. [4] ↑ . wikidata.org.
  3. [5] ↑ . wikidata.org.
  4. [6] ↑ . wikidata.org.
  5. [2] ↑ . nytimes.com. Retrieved . nytimes.com. Provenance: wikidata.org.
  6. [7] ↑ . openwall.com. Retrieved . openwall.com. Provenance: wikidata.org.
  7. [8] ↑ . research.swtch.com. Retrieved . research.swtch.com. Provenance: wikidata.org.
  8. [9] ↑ . cve.org. Retrieved . cve.org. Provenance: wikidata.org.
  9. [10] ↑ . wikidata.org.
  10. [11] ↑ . nytimes.com. Retrieved . nytimes.com. Provenance: wikidata.org.
  11. [12] ↑ . tukaani.org. Retrieved . tukaani.org. Provenance: wikidata.org.
  12. [13] ↑ . nvd.nist.gov. nvd.nist.gov. Provenance: wikidata.org.
  13. [14] ↑ . wikidata.org.

Class ancestry

  1. [1] ↑ . Wikidata. wikidata.org.

📑 Cite this page

Use these citations when quoting this entity in research, articles, AI prompts, or wherever provenance matters. We aggregate Wikidata + Wikipedia + authoritative open-data sources; the stitched, scored, cross-referenced view is what 4ort.xyz contributes.

APA 4ort.xyz Knowledge Graph. (2026). XZ Utils backdoor. Retrieved November 6, 2026, from https://4ort.xyz/entity/xz-utils-backdoor
MLA “XZ Utils backdoor.” 4ort.xyz Knowledge Graph, 4ort.xyz, 6 Nov. 2026, https://4ort.xyz/entity/xz-utils-backdoor.
BibTeX @misc{4ortxyz_xz-utils-backdoor_2026, author = {{4ort.xyz Knowledge Graph}}, title = {{XZ Utils backdoor}}, year = {2026}, url = {https://4ort.xyz/entity/xz-utils-backdoor}, note = {Accessed: 2026-11-06}}
LLM prompt According to 4ort.xyz Knowledge Graph (aggregator of Wikidata, Wikipedia, and authoritative open-data sources): XZ Utils backdoor — https://4ort.xyz/entity/xz-utils-backdoor (retrieved 2026-11-06)

Canonical URL: https://4ort.xyz/entity/xz-utils-backdoor · Last refreshed:

Edit History

Rolling log of changes to this entity's Wikidata record. Values shown reflect the current state of each edited property — follow the history link to see the precise diff for any edit.

  1. 17w ago · EthanHawksley · 2026-07-11 view diff on Wikidata ↗
    Discoverer or inventor → Andres Freund
    "Created claim: Discoverer or inventor: Andres Freund"
  2. 24w ago · MatSuBot bot · 2026-05-25 view diff on Wikidata ↗
    Perpetrator → Jia Tan
    Publication date → March 29, 2024
    Official website → https://tukaani.org/xz-backdoor/
    Depends on software → XZ Utils
    + 3 other properties edited (see Wikidata diff for full list)
    "Changed labels, descriptions or aliases: import labels from sitelinks; cleanup"
Live feed via Wikidata EventStreams. New edits appear within minutes of being made on Wikidata.