CVE-2025-24832 Information

Description

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.4.866 Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892 Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.

Reference

https://security-advisory.acronis.com/advisories/SEC-7649