Local Privilege Escalation Vulnerability in Acronis Cyber Protect Cloud Agent for Windows
CVE-2025-24828

Currently unrated

Key Information:

Vendor
Acronis
Status
Acronis Cyber Protect Cloud Agent
Vendor
CVE Published:
31 January 2025

Summary

A local privilege escalation vulnerability exists in Acronis Cyber Protect Cloud Agent for Windows due to improper handling of dynamic link libraries (DLLs). An attacker with local access could exploit this flaw to execute arbitrary code with elevated privileges, potentially compromising the system. It is essential for users of affected versions to update to build 39378 or later to safeguard against this security risk.

Affected Version(s)

Acronis Cyber Protect Cloud Agent Windows < 39378

References

https://security-advisory.acronis.com/advisories/SEC-7842
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

@cyberexplorer (https://hackerone.com/cyberexplorer)
.