This vulnerability (CVE-2026-41952) involves improper input validation in Acronis DeviceLock DLP and Acronis Cyber Protect Cloud Agent on Windows platforms, leading to local privilege escalation. The flaw is categorized as CWE-123, which typically involves a write-what-where condition allowing an attacker with local access to escalate privileges. Affected versions are those prior to build 9.0.93212 for DeviceLock DLP and prior to build 42183 for Cyber Protect Cloud Agent. The CVSS 3.0 score of 7.8 reflects high impact with local attack vector, low attack complexity, and no user interaction required. The vendor has not yet provided a patch or official remediation details.

Successful exploitation could allow a local attacker to escalate privileges on the affected Windows systems, potentially gaining full control over the system. This impacts confidentiality, integrity, and availability of the affected devices. There are no reports of active exploitation in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to privilege escalation attempts. Avoid deploying affected versions in sensitive environments if possible.