CVE-2025-48959: Acronis Cyber Protect Cloud Agent

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 40077.

Affected products

• Acronis Acronis Cyber Protect Cloud Agent: before 40077 (fixed in 40077)

Published 2025-06-04. Last modified 2026-06-17.