CVE-2025-24831

MEDIUM

Acronis Cyber Protect Cloud Agent <39378 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.

References (1)

Scores

CVSS v3 6.6
EPSS 0.0019
EPSS Percentile 40.4%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-428
Status published
Products (1)
Acronis/Acronis Cyber Protect Cloud Agent unspecified - 39378
Published Jan 31, 2025
Tracked Since Feb 18, 2026