PT-2025-5586 · Acronis · Acronis Cyber Protect Cloud Agent

Published 2025-01-30 · Updated 2025-01-31 · CVE-2025-24831

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent (Windows) versions prior to build 39378

Description The issue is related to a local privilege escalation due to an unquoted search path vulnerability. This vulnerability affects the Acronis Cyber Protect Cloud Agent on Windows systems.

Recommendations For versions prior to build 39378, update to build 39378 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive system paths to minimize the risk of exploitation.

Fix

LPE

Weakness Enumeration

CWE-428

Related Identifiers

BDU:2025-10529

CVE-2025-24831

Affected Products

Acronis Cyber Protect Cloud Agent

References · 6

• https://security-advisory.acronis.com/advisories/SEC-6153 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24831 · Security Note
• https://bdu.fstec.ru/vul/2025-10529 · Security Note
• https://twitter.com/VulmonFeeds/status/1885478138290815432 · Twitter Post
• https://t.me/cvedetector/16932 · Telegram Post
• https://t.me/cvenotify/109399 · Telegram Post