The vulnerability allows an attacker to manipulate system resources by bypassing authorization checks. It is classified as CWE-863, indicating improper authorization. An attacker who can gain unauthorized access to modify resources could affect system integrity, potentially leading to uncontrolled configuration changes or data loss.

Acronis Cyber Protect 17 on Linux and Microsoft Windows platforms is affected in all builds prior to build 41186. The issue exists across all documented operating systems listed for the product.

The CVSS score of 4.3 places this vulnerability in the moderate severity range, and the EPSS score of less than 1% indicates a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is either local or remote access to the application where improper authorization checks can be leveraged, typically requiring authentication but bypassing further permission validation.