Acronis True Image 22.4.9850

Recurring Security Questions and Known Issues

1. Has Acronis True Image ever been involved in a data breach?

Yes, in March 2023, a threat actor known as "kernelware" claimed responsibility for leaking 12.2 GB of internal Acronis data. The data included system configurations, backup operation screenshots, and Python scripts. Acronis confirmed that the breach was limited to a single customer’s credentials used to upload diagnostic data to Acronis Support. No Acronis products or services were compromised, and the breach did not result from a vulnerability in Acronis software.

Acronis Security Incident Analysis TechRadar Report

2. Are there known vulnerabilities in Acronis True Image that could expose sensitive information?

Yes, a vulnerability identified as CVE-2024-55538 was disclosed in January 2025. This vulnerability affected Acronis True Image versions prior to build 41725 for macOS and build 41736 for Windows. Due to insufficient authentication measures, unauthorized users could potentially access sensitive information. Users are advised to update to the latest builds to mitigate this risk.

Acronis Advisory Database - CVE-2024-55538 SecurityVulnerability.io Report

3. Has Acronis True Image been susceptible to privilege escalation vulnerabilities?

Yes, a high-severity vulnerability tracked as CVE-2024-34013 was identified in Acronis True Image. This local privilege escalation issue was due to an OS command injection vulnerability, allowing attackers to execute arbitrary commands with elevated privileges. Users are encouraged to apply the necessary patches to address this vulnerability.

Acronis Advisory Database - CVE-2024-34013

4. How does Acronis True Image handle vulnerability assessments?

Acronis True Image includes a vulnerability assessment tool that scans the operating system and applications for known vulnerabilities. This feature helps users identify and address security gaps by providing recommendations to close them. The tool is integrated into the software and can be run manually or scheduled to run automatically.

Acronis Blog on Vulnerability Assessments

5. Were there any issues with the Acronis True Image auto-updater being flagged as compromised?

Yes, in April 2023, users reported that Malwarebytes flagged the Acronis True Image auto-updater as "compromised." This was due to the updater attempting to connect to an IP address that was listed as malicious. While this raised concerns, it was not indicative of a widespread compromise of the Acronis software itself. Users are advised to ensure their software is updated and to monitor security software alerts.

Malwarebytes Forum Discussion

6. How can users stay informed about security updates and advisories for Acronis True Image?

Acronis maintains a Security Advisory Database where users can find information about known vulnerabilities, security advisories, and updates related to their products, including Acronis True Image. Regularly checking this database and applying recommended updates is crucial for maintaining software security.

Acronis Security Advisory Database

Note: Users are encouraged to keep their Acronis True Image software up to date with tools such as UpdateStar and to follow best security practices, such as using strong, unique passwords and enabling multi-factor authentication where available.