Insecure DLL loading in Acronis products - CVE-2025-11178

Vulnerability identifier: #VU153066

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-11178

CWE-ID: CWE-427

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to compromise vulnerable system.

The vulnerability exists due to the application loads DLL libraries in an insecure manner. A local user can place a specially crafted .dll file and gain elevated privileges on the system.

Acronis True Image (Windows)
Acronis True Image OEM (Windows)
Acronis True Image for Western Digital (Windows)
Acronis True Image for SanDisk (Windows)

Install updates from vendor's website.

Acronis True Image (Windows) - update to build 42386
Acronis True Image OEM (Windows) - update to build 42575
Acronis True Image for Western Digital (Windows) - update to build 42636
Acronis True Image for SanDisk (Windows) - update to build 42679

• https://security-advisory.acronis.com/advisories/SEC-7078

• Privilege escalation in Acronis True Image and True Image OEM