CVE-2025-30414: High severity Acronis Cyber Protect Cloud Agent (Windows) vulnerability
Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker needs local access to a Windows system running an affected Acronis Cyber Protect Cloud Agent or Acronis Cyber Protect 17 installation, along with low-level privileges. The issue does not require user interaction.
Which installations are affected?
Acronis Cyber Protect Cloud Agent for Windows is affected before build 42569. Acronis Cyber Protect 17 for Windows is affected before build 42587.
What is the potential impact after exploitation?
The vulnerability is a local privilege-escalation issue caused by improper authentication. Successful exploitation can result in high confidentiality and integrity impact, with no availability impact specified.