Read the docs
TI-2026-01652 Aliases CVE-2026-1995GHSA-c236-24xj-j3g6

IDrive Cloud Backup Client for Windows contains a privilege escalation vulnerability

Priority LOW 35Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

In versions before 7.0.0.64, IDrive’s id_service.exe process runs with elevated privileges and regularly reads from several files under the C:\ProgramData\IDrive\ directory. The UTF16-LE encoded contents of these files are used as arguments for starting a process, but they can be edited by any standard user logged into the system. An attacker can overwrite or edit the files to specify a path to an arbitrary executable, which will then be executed by the id_service.exe process with SYSTEM privileges.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00177 7th percentileScored 2026-11-08
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IDriveIDrive Cloud Backup Client for Windowsup to 7.0.0.63—No fix listedCNA
  • IDrive Cloud Backup Client for Windows VendorIDrive Affected up to 7.0.0.63 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-1995
  2. 2026-10-03 Alias added: GHSA-c236-24xj-j3g6

References

Other 1

  • TI-2021-13692 iDrive RemotePC before 7.6.48 on Windows allows authentication bypass. CVSS 3.1CRITICAL 9.8
  • TI-2021-13693 iDrive RemotePC before 4.0.1 on Linux allows denial of service. CVSS 3.1HIGH 7.5
  • TI-2021-13694 iDrive RemotePC before 7.6.48 on Windows allows privilege escalation. CVSS 3.1HIGH 7.8
  • TI-2020-12104 IDrive before 6.7.3.19 on Windows installs by default to… CVSS 3.1HIGH 7.8
  • TI-2021-13691 iDrive RemotePC before 7.6.48 on Windows allows information disclosure. CVSS 3.1MEDIUM 5.5
  • TI-2021-13689 iDrive RemotePC before 7.6.48 on Windows allows information disclosure. CVSS 3.1MEDIUM 5.3
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences