PT-2025-23800 · Acronis · Acronis Cyber Protect Cloud Agent

Mad31K · CVE-2025-48959 · Published 2025-05-29 · Updated 2025-06-04

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent (Windows) versions before build 40077

Description The issue is related to local privilege escalation due to insecure file permissions.

Recommendations For versions before build 40077, update to build 40077 or later to resolve the issue.

Fix

LPE

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2025-06440

CVE-2025-48959

Affected Products

Acronis Cyber Protect Cloud Agent

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-48959 · Security Note
• https://security-advisory.acronis.com/advisories/SEC-8133 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06440 · Security Note
• https://t.me/cvenotify/124579 · Telegram Post
• https://twitter.com/CVEnew/status/1930251012243165286 · Twitter Post
• https://t.me/cvetracker/25397 · Telegram Post