CVE-2025-30410: Sensitive Data Leak in Acronis Cyber Protect Cloud Agent

The core of this vulnerability lies in the absence of proper authentication checks. An attacker who can exploit this flaw could potentially gain access to sensitive data stored or processed by the Acronis Cyber Protect Cloud Agent. This includes backup data, system configurations, and potentially even credentials. The ability to manipulate data introduces a further risk, allowing attackers to corrupt backups, alter system settings, or even inject malicious code. The impact is particularly severe given the nature of Acronis's product – data protection – making this a significant compromise of trust. Successful exploitation could lead to data breaches, ransomware attacks, and significant disruption of business operations.

1. Reserved2025-03-21
2. Published2026-02-20
3. Modified2026-02-26
4. EPSS updated2026-03-23

The primary mitigation for CVE-2025-30410 is to upgrade Acronis Cyber Protect Cloud Agent to build 41800 or later. If an immediate upgrade is not feasible due to compatibility issues or downtime constraints, consider implementing stricter network segmentation to limit access to the agent. Review firewall rules to ensure only authorized systems can communicate with the agent. While not a complete solution, restricting access can reduce the attack surface. Monitor system logs for unusual activity, specifically looking for unauthorized access attempts or data modification events. After upgrading, verify the fix by attempting to access agent functionalities without proper authentication credentials and confirming access is denied.