CVE-2020-5752: Druva Insync Client

High severity, CVSS 7.8. EPSS: 8.6% chance of exploitation in the next 30 days.

Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitrary operating system commands with SYSTEM privileges.

Affected products

• Druva Insync Client: version 6.6.3 only

Published 2020-05-21. Last modified 2026-06-17.