Local Privilege Escalation Vulnerability in Acronis Cyber Protect Cloud Agent
CVE-2025-11792

7.3HIGH

Key Information:

Vendor

Acronis
Status
Acronis Cyber Protect Cloud Agent
Vendor
CVE Published:
5 March 2026

What is CVE-2025-11792?

Acronis Cyber Protect Cloud Agent for Windows is susceptible to a local privilege escalation vulnerability due to DLL hijacking. This flaw could potentially allow an attacker with local access to escalate their privileges, leading to unauthorized actions within the system. Users are advised to upgrade to build 41124 or later to mitigate any associated risks.

Affected Version(s)

Acronis Cyber Protect Cloud Agent Windows < 41124

References

https://security-advisory.acronis.com/advisories/SEC-9439
vendor-advisory

CVSS V3.0

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

@satz4797 (https://hackerone.com/satz4797)
.