CVE-2025-30412

The error lies in the improper implementation of the authentication mechanism in the Acronis Cyber Protect product. A remote attacker, without possessing any privileges or requiring user interaction, can bypass required identity verification controls. As a result, they gain unauthorized access to protected system resources and the ability to modify them, with the scope of the attack extending beyond the directly vulnerable component (Scope: Changed).

An attacker can obtain unauthorized access to sensitive data processed by the backup and protection system (full confidentiality, integrity, and availability threatened at critical level), as well as manipulate or disrupt the operation of protected environments.

Acronis Cyber Protect 16 should be updated to build 39938 or newer and Acronis Cyber Protect 15 to build 41800 or newer as soon as possible. Detailed information is available in the official vendor security bulletin: https://security-advisory.acronis.com/advisories/SEC-8598

Acronis Cyber Protect 16 (Linux, Windows) in builds prior to 39938 and Acronis Cyber Protect 15 (Linux, Windows) in builds prior to 41800.