CVE-2025-30413: Acronis Agent

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40497, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.

Affected products

  • Acronis Agent: before c25.07 (fixed in c25.07)
  • Acronis Cyber Protect: before 17.0.41186 (fixed in 17.0.41186)

Published 2026-03-06. Last modified 2026-06-17.