Local Privilege Escalation in Acronis Cyber Protect Products
CVE-2025-30414

7.1HIGH

Key Information:

Vendor

Acronis
Status
Acronis Cyber Protect Cloud Agent
Acronis Cyber Protect 17
Vendor
CVE Published:
28 October 2026

What is CVE-2025-30414?

A local privilege escalation vulnerability exists in Acronis Cyber Protect Cloud Agent and Acronis Cyber Protect 17, stemming from improper authentication practices. This flaw allows attackers to elevate their privileges within the affected software, posing a risk to system integrity. Users of Acronis products should take immediate steps to upgrade to the latest builds to mitigate this security threat.

Affected Version(s)

Acronis Cyber Protect 17 Windows < 42587

Acronis Cyber Protect Cloud Agent Windows < 42569

References

https://security-advisory.acronis.com/advisories/SEC-8648
vendor-advisory

CVSS V3.0

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Airbus SecLab (mailto:vuln@airbus.com)
Quentin Liddell (mailto:vuln@airbus.com)
Mattéo Ricordeau (mailto:vuln@airbus.com)
Benoît Camredon (mailto:vuln@airbus.com)
.