This vulnerability (CVE-2025-7779) involves a local privilege escalation in Acronis True Image for macOS caused by insecure configuration of an XPC service. Affected products include Acronis True Image (macOS) before build 42389, Acronis True Image for SanDisk (macOS) before build 42198, Acronis True Image for Western Digital (macOS) before build 42197, and Acronis True Image OEM (macOS) before build 42571. The issue is categorized under CWE-269 (Improper Privilege Management). The CVSS 3.0 vector indicates low attack complexity, low privileges required, no user interaction, and a scope change with high impact on confidentiality, integrity, and availability.

An attacker with local access can exploit this vulnerability to escalate privileges, gaining higher-level access than intended by the system. This can lead to full system compromise, including unauthorized disclosure, modification, or destruction of data and disruption of system availability. The high CVSS score reflects the critical nature of these impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, limit local access to trusted users only and monitor for suspicious activity related to Acronis True Image services.