Back Gbhackers

IDrive for Windows Vulnerability Allows Attackers to Escalate Privileges and Gain Unauthorized Access

Gbhackers •Divya • March 26, 2026

A critical security flaw has been identified in the IDrive Cloud Backup Client for Windows, exposing users to local privilege escalation attacks. Tracked as CVE-2026-1995, this vulnerability allows authenticated, low-privilege attackers to execute arbitrary code with the highest system permissions, potentially leading to a complete compromise of the targeted device. IDrive is a widely used […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical IDrive Vulnerability Allows Privilege Escalation on Windows A critical vulnerability, tracked as CVE-2026-1995, has been discovered in the IDrive Cloud Backup Client for Windows, affecting versions 7.0.0.63 and earlier. This flaw allows authenticated low-privilege users to execute arbitrary code with SYSTEM-level permissions, potentially compromising the entire device. The vulnerability arises from weak permission settings on files within the C:\ProgramData\IDrive directory, enabling attackers to overwrite or add files that the id_service.exe process executes with elevated privileges. Currently, there is no patch available, but IDrive has confirmed that a security update is in development. Organizations are advised to restrict write permissions on the affected directory and implement monitoring solutions to detect unauthorized changes. The vulnerability poses significant risks, including data theft and system modification. Security teams should remain vigilant until a patch is released. 4 sources 71

Extracted Entities

IDrive for Windows Vulnerability Allows Attackers to Escalate Privileges and Gain Unauthorized Access

The full story

Extracted Entities

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)