High severity · published Sep 30, 2025
CVE-2025-7779
Local privilege escalation due to insecure XPC service configuration
8.8
CVSS
0.1%
EPSS
No
On KEV
Description
Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389, Acronis True Image for SanDisk (macOS) before build 42198, Acronis True Image for Western Digital (macOS) before build 42197, Acronis True Image OEM (macOS) before build 42571.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AT
Acronis True Image · Acronis
before 42389 · source: vendor
AT
Acronis True Image OEM · Acronis
before 42571 · source: vendor
AT
Acronis True Image for SanDisk · Acronis
before 42198 · source: vendor
AT
Acronis True Image for Western Digital · Acronis
before 42197 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-7779
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-7779
security-advisory.acronis.com
https://security-advisory.acronis.com/advisories/SEC-8193
More from Acronis True Image
7.8
CVE-2026-33092
Local privilege escalation due to improper handling of environment variables
7.8
CVE-2026-28727
Local privilege escalation due to insecure Unix socket permissions
7.8
CVE-2024-34013
Local privilege escalation due to OS command injection vulnerability
7.3
CVE-2025-11178
Local privilege escalation due to DLL hijacking vulnerability
6.7
CVE-2026-33271
Local privilege escalation due to insecure folder permissions