This vulnerability (CVE-2024-55538) affects Acronis True Image on macOS and Windows platforms prior to builds 41725 (macOS), 41736 (Windows), 42571 (OEM macOS), and 42575 (OEM Windows). It is classified under CWE-306 (Missing Authentication for Critical Function) and results in sensitive information disclosure. The CVSS 3.0 base score is 4.0, indicating a medium impact primarily on confidentiality. The vulnerability requires local access (AV:L) and no privileges or user interaction are needed to trigger it. There is no official vendor remediation or patch information available at this time.

The vulnerability allows unauthorized disclosure of sensitive information due to missing authentication controls. It does not impact integrity or availability. Exploitation requires local access to the affected system. There are no known active exploits in the wild. The impact is limited to confidentiality loss of potentially sensitive data within the affected product.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict local access to systems running affected versions of Acronis True Image. Monitor vendor communications for updates on patches or mitigations.