Acronis Cyber Protect Cloud Agent Unquoted Search Path Vulnerability Leading to Local Privilege Escalation

A local privilege escalation vulnerability has been identified in Acronis Cyber Protect Cloud Agent for Windows, prior to build 39378. This issue arises from an unquoted search path vulnerability, which can be exploited to gain elevated privileges on the system.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling a user to gain higher-level permissions on the affected system.

Remediation

Users can update to Acronis Cyber Protect Cloud Agent version C25.01 or later to address this vulnerability.