Local Privilege Escalation in Acronis Cloud Manager for Windows
CVE-2026-0705

6.7MEDIUM

Key Information:

Vendor

Acronis
Status
Acronis Cloud Manager
Vendor
CVE Published:
27 January 2026

What is CVE-2026-0705?

A local privilege escalation vulnerability exists in the Acronis Cloud Manager for Windows due to insecure folder permissions. This flaw allows an unauthorized user to escalate their privileges, potentially leading to unauthorized access to sensitive system resources. Users are advised to update to build 6.4.25342.354 or later to mitigate this issue.

Affected Version(s)

Acronis Cloud Manager Windows < 6.4.25342.354

References

https://security-advisory.acronis.com/advisories/SEC-7316
vendor-advisory

CVSS V3.0

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

@satz4797 (https://hackerone.com/satz4797)
.