CVE-2026-42061 is a local privilege escalation vulnerability in Acronis DeviceLock DLP (Windows) versions prior to build 9.0.15051.93227. The issue arises from excessive permissions granted to child processes, which can be exploited by a local user with limited privileges to gain higher privileges on the affected system. The vulnerability is categorized under CWE-250 (Execution with Unnecessary Privileges). No official patch or remediation information is currently available from the vendor, and no known exploits are reported in the wild.

An attacker with local access and limited privileges can exploit this vulnerability to escalate their privileges, potentially gaining full control over the affected system. This can lead to complete compromise of confidentiality, integrity, and availability of the system and data protected by Acronis DeviceLock DLP.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to privilege escalation attempts.