Is CVE-2025-30414 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-30414 being exploited in the wild.

How severe is CVE-2025-30414?

High severity, with a CVSS score of 7.1, published 28 October 2026.

Which products and versions are affected?

Acronis Cyber Protect 17 Windows before build 42587; Acronis Cyber Protect Cloud Agent Windows before build 42569.

Is there a fix for CVE-2025-30414?

Yes: fixed in Acronis Cyber Protect Cloud Agent build 42569 or later; Acronis Cyber Protect 17 build 42587 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-30414 attacked?

It is attacked with local access, in a hosted service.

Am I affected by CVE-2025-30414?

Check whether you run Acronis Cyber Protect 17 or Acronis Cyber Protect Cloud Agent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-30414: Acronis Cyber Protect Cloud Agent local privilege escalation

CVE-2025-30414 · Severity: high · CVSS 7.1 · Published 2026-10-28

Acronis Cyber Protect Cloud Agent and Cyber Protect for Windows contain an authentication flaw that allows local attackers to escalate their privileges on an affected system. An attacker with local access could gain elevated permissions, potentially leading to full system compromise and unauthorized access to protected data.

Technologies: Acronis Cyber Protect Cloud Agent. Vendors: Acronis.

Quick answers

Is CVE-2025-30414 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-30414 being exploited in the wild.
How severe is CVE-2025-30414?: High severity, with a CVSS score of 7.1, published 28 October 2026.
Which products and versions are affected?: Acronis Cyber Protect 17 Windows before build 42587; Acronis Cyber Protect Cloud Agent Windows before build 42569.
Is there a fix for CVE-2025-30414?: Yes: fixed in Acronis Cyber Protect Cloud Agent build 42569 or later; Acronis Cyber Protect 17 build 42587 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-30414 attacked?: It is attacked with local access, in a hosted service.
Am I affected by CVE-2025-30414?: Check whether you run Acronis Cyber Protect 17 or Acronis Cyber Protect Cloud Agent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Acronis Cyber Protect Cloud Agent build 42569 or later; Acronis Cyber Protect 17 build 42587 or later

Technical details

A local privilege escalation vulnerability exists in Acronis Cyber Protect Cloud Agent and Cyber Protect due to improper authentication mechanisms. An attacker with local access to the system can exploit this flaw to gain elevated privileges. The vulnerability can be remediated by updating to patched versions.

Affected products

Acronis Cyber Protect Cloud Agent Windows before build 42569
Acronis Cyber Protect 17 Windows before build 42587

Timeline

2026-10-28: disclosed: CVE-2025-30414 published

References

https://security-advisory.acronis.com/advisories/SEC-8648

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.