Local Privilege Escalation in Acronis True Image macOS

Publication date: 2026-04-10

Last updated on: 2026-05-19

Assigner: Acronis International GmbH

Description

Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True Image (macOS) before build 42902.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-10

Last Modified

2026-05-19

Generated

2026-07-06

AI Q&A

2026-04-10

EPSS Evaluated

2026-07-05

NVD

CVE-2026-33092

EUVD

EUVD-2026-21372

Affected Vendors & Products

Vendor	Product	Version / Range
acronis	true_image_oem	to 42571 (exc)
acronis	true_image	to 42902 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-15	One or more system settings or configuration elements can be externally controlled by a user.

Attack-Flow Graph

Executive Summary

This vulnerability is a local privilege escalation issue caused by improper handling of environment variables in certain versions of Acronis True Image software for macOS. It allows a local user to potentially gain higher privileges than intended by exploiting how environment variables are processed.

Impact Analysis

The impact of this vulnerability is that an attacker with local access could escalate their privileges, gaining higher-level permissions on the affected system. This could lead to unauthorized access to sensitive data, modification of system settings, or installation of malicious software.

Hi! I’m here to help you understand CVE-2026-33092. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70