{"id":"CVE-2026-51831","kind":"vulnerability","aliases":["CVE-2026-51831"],"related":[],"title":"IDrive Backup for Windows: local attacker can run code via id_service.exe","description":"An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the id_service.exe component","summary":"IDrive Backup for Windows version 7.0.1.1 and earlier has a flaw in its id_service.exe component that lets a local attacker execute arbitrary code. The issue is fixed in version 7.0.1.2.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["endpoint-backup","idrive","other","windows"],"not_affected_if":["not-installed","version-7.0.1.2-or-later"],"how_to_check":"- Check the installed IDrive Backup for Windows version in the app's About screen or installed programs list; versions `7.0.1.1` and below are affected.\n- Confirm whether `id_service.exe` is present on the machine.","fix":"- IDrive Backup for Windows: move to version `7.0.1.2`","status":"open","published_at":"2026-10-29T20:17:31+00:00","first_seen_at":"2026-10-29T20:26:51+00:00","triaged_at":"2026-10-29T20:28:14+00:00","updated_at":"2026-10-29T20:28:14+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-29T20:28:14Z","model":"claude-haiku-5-5","output":{"fix":"- IDrive Backup for Windows: move to version `7.0.1.2`","reach":"local","title":"IDrive Backup for Windows: local attacker can run code via id_service.exe","impact":"high","summary":"IDrive Backup for Windows version 7.0.1.1 and earlier has a flaw in its id_service.exe component that lets a local attacker execute arbitrary code. The issue is fixed in version 7.0.1.2.","audience":"businesses","category":"other","nicknames":[],"who_cares":["windows","idrive","endpoint-backup"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"local user runs arbitrary code with the component's privileges","analyst_note":"Confirm the privilege level of id_service.exe and whether it runs as SYSTEM; check the NVD page for CVSS and any vendor advisory.","how_to_check":"- Check the installed IDrive Backup for Windows version in the app's About screen or installed programs list; versions `7.0.1.1` and below are affected.\n- Confirm whether `id_service.exe` is present on the machine.","plain_action":"","needs_analyst":true,"not_affected_if":["version-7.0.1.2-or-later","not-installed"],"who_is_affected":"Windows machines running IDrive Backup for Windows version 7.0.1.1 or earlier are exposed, since the attacker must already have local access. Systems without this client installed, or already on 7.0.1.2, are not affected. The sources do not describe further configuration conditions.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000695,"input_tokens":4105,"output_tokens":569,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-51831':14A,17A '7.0.1.1':29B,63C '7.0.1.2':53B,70C 'affect':66C 'allow':71C 'arbitrari':45B,77C 'attack':6A,43B,74C 'backup':2A,20B,25B,59C 'code':9A,46B,78C 'compon':38B,82C 'cve':12A,15A 'earlier':31B 'endpoint':19B 'endpoint-backup':18B 'execut':44B,76C 'fix':50B 'flaw':34B 'id_service.exe':11A,37B,81C 'idriv':1A,21B,24B,57C,58C 'issu':48B,55C 'let':40B 'local':5A,42B,73C 'remedi':67C 'run':8A 'version':28B,52B,62C,69C 'via':10A,79C 'window':4A,23B,27B,61C","nicknames":[],"mitigations":[],"who_affected":"Windows machines running IDrive Backup for Windows version 7.0.1.1 or earlier are exposed, since the attacker must already have local access. Systems without this client installed, or already on 7.0.1.2, are not affected. The sources do not describe further configuration conditions.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-29T20:17:31+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-51831","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-51831","severity":null,"published_at":"2026-10-29T20:17:31+00:00","modified_at":"2026-10-29T20:17:31+00:00","first_seen_at":"2026-10-29T20:26:51+00:00","fetched_at":"2026-10-29T20:26:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}