← All Advisories

Acronis True Image macOS improper environment variable handling allows local privilege escalation before build 42902

Last refreshed2026-09-30

Status: NEW  |  Advisory ID: CVE-2026-33092

Key Details

CVECVE-2026-33092
CVSS Score / Version7.8 (High) / CVSS v3.0
Updated2026-06-17
CVSS VectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Proseattack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Classified asCWE-15 (External Control of System or Configuration Setting)

What to Know

Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True Image (macOS) before build 42902. (NVD)

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33092
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33092