Acronis True Image vulnerabilities

6 known vulnerabilities in Acronis True Image from Acronis. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Acronis True Image OEM: External Control of System or Configuration Setting

  CVE-2026-33092Apr 10, 2026Acronis

  Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True Image (macOS) before build 42902.

• 7.8 High severity

  Acronis Cyber Protect 17: Incorrect Default Permissions

  CVE-2026-28727Mar 6, 2026Acronis

  Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image (macOS) before build

• 8.8 High severity

  Acronis True Image: Improper Privilege Management

  CVE-2025-7779Sep 30, 2025Acronis

  Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389, Acronis True Image for SanDisk (macOS) before build 42198, Acronis True Image for Western Digital (macOS)

• 7.3 High severity

  Acronis True Image: Uncontrolled Search Path Element

  CVE-2025-11178Sep 30, 2025Acronis

  Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386, Acronis True Image for Western Digital (Windows) before build 42636, Acronis True Image for SanDisk (Windows) b

• 7.8 High severity

  Acronis True Image: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-34013Jul 18, 2024Acronis

  Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image (macOS) before build 41396, Acronis True Image OEM (macOS) before build 42571.

• 8.2 High severity

  Acronis Cyber Protect Cloud Agent: Unquoted Search Path or Element

  CVE-2024-34010Apr 29, 2024Acronis

  Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) befor