Rollback abuse is an attack pattern in which an adversary forces a device or application to accept an older software or firmware version. Because old builds often contain known vulnerabilities, restoring them can undo security fixes and reopen previously patched weaknesses. This matters in cyber security because update systems are meant to improve trust, but a weak downgrade path can turn that same mechanism into an attack surface.
In real attacks, rollback abuse may target firmware, mobile apps, or device managers by exploiting missing version checks, unsigned update packages, or insecure recovery features. Defenses include enforcing anti-rollback controls, verifying update authenticity, maintaining secure version counters, and refusing installs older than the current protected baseline. For connected systems like drones and IoT devices, blocking downgrades is as important as applying patches, because an attacker only needs one trusted path to restore a vulnerable build.