CVE-2020-5798: Druva Insync

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user from a lower privileged user due to improper integrity checks and directory permissions.

Affected products

• Druva Insync: version 6.8.0 only

Published 2020-12-07. Last modified 2026-06-17.