PT-2025-39998 · Acronis · Acronis True Image For Sandisk+2

Carlos Garrido + 1 · Published 2025-09-30 · Updated 2025-09-30 · CVE-2025-7779

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis True Image (macOS) versions prior to build 42389 Acronis True Image for SanDisk (macOS) versions prior to build 42198 Acronis True Image for Western Digital (macOS) versions prior to build 42197

Description An insecure XPC service configuration can lead to local privilege escalation. XPC (eXtension Programming Interface) is a macOS framework for inter-process communication. An insecure configuration of this service allows an attacker to gain elevated privileges on the system.

Recommendations Update Acronis True Image (macOS) to build 42389 or later. Update Acronis True Image for SanDisk (macOS) to build 42198 or later. Update Acronis True Image for Western Digital (macOS) to build 42197 or later.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-7779

Affected Products

Acronis True Image

Acronis True Image For Sandisk

Acronis True Image For Western Digital

References · 6

• https://security-advisory.acronis.com/advisories/SEC-8193 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7779 · Security Note
• https://twitter.com/VulmonFeeds/status/1973161304257884171 · Twitter Post
• https://t.me/CVEtracker/33733 · Telegram Post
• https://twitter.com/CveFindCom/status/1973042615487484015 · Twitter Post
• https://twitter.com/CVEnew/status/1973043810708983855 · Twitter Post