Description
Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image (macOS) before build 42902.
Scores
CVSS v3
7.8
EPSS
0.0001
EPSS Percentile
2.5%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-276
Status
published
Products (5)
Acronis/Acronis Cyber Protect 17
unspecified - 41186
Acronis/Acronis Cyber Protect Cloud Agent
unspecified - 41124
Acronis/Acronis True Image
unspecified - 42902
acronis/agent
< c25.10
acronis/cyber_protect
< 17.0.41186
Published
Mar 06, 2026
Tracked Since
Mar 06, 2026