{"id":"CVE-2026-51832","kind":"vulnerability","aliases":["CVE-2026-51832"],"related":[],"title":"IDrive Backup for Windows: local attacker runs code via id_service.exe","description":"An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the id_service.exe component","summary":"IDrive Backup for Windows version 7.0.1.1 and below has a flaw in its id_service.exe component. A local attacker on the same machine can execute arbitrary code.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup","idrive","other","windows"],"not_affected_if":["version-7.0.1.2-or-later"],"how_to_check":"- Check the installed IDrive Backup for Windows version in the application's About screen or installed programs list; versions `7.0.1.1` and below are affected.","fix":"- IDrive IDrive Backup for Windows: `7.0.1.2`","status":"open","published_at":"2026-10-29T20:17:31+00:00","first_seen_at":"2026-10-29T20:26:51+00:00","triaged_at":"2026-10-29T20:28:14+00:00","updated_at":"2026-10-29T20:28:14+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-29T20:28:14Z","model":"claude-haiku-5-5","output":{"fix":"- IDrive IDrive Backup for Windows: `7.0.1.2`","reach":"local","title":"IDrive Backup for Windows: local attacker runs code via id_service.exe","impact":"high","summary":"IDrive Backup for Windows version 7.0.1.1 and below has a flaw in its id_service.exe component. A local attacker on the same machine can execute arbitrary code.","audience":"businesses","category":"other","nicknames":[],"who_cares":["windows","idrive","backup"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"local attacker executes arbitrary code on the Windows machine","analyst_note":"","how_to_check":"- Check the installed IDrive Backup for Windows version in the application's About screen or installed programs list; versions `7.0.1.1` and below are affected.","plain_action":"","needs_analyst":false,"not_affected_if":["version-7.0.1.2-or-later"],"who_is_affected":"Windows machines running IDrive Backup for Windows version 7.0.1.1 or earlier are affected. The attacker needs local access to the machine, so exposure is limited to users or processes already on the host. Machines already on 7.0.1.2 or later are not affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000645,"input_tokens":4105,"output_tokens":469,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-51832':13A,16A '7.0.1.1':26B,56C '7.0.1.2':63C 'affect':59C 'allow':64C 'arbitrari':45B,70C 'attack':6A,38B,67C 'backup':2A,17B,22B,52C 'code':8A,46B,71C 'compon':35B,75C 'cve':11A,14A 'execut':44B,69C 'flaw':31B 'id_service.exe':10A,34B,74C 'idriv':1A,18B,21B,50C,51C 'issu':48C 'local':5A,37B,66C 'machin':42B 'remedi':60C 'run':7A 'version':25B,55C,62C 'via':9A,72C 'window':4A,20B,24B,54C","nicknames":[],"mitigations":[],"who_affected":"Windows machines running IDrive Backup for Windows version 7.0.1.1 or earlier are affected. The attacker needs local access to the machine, so exposure is limited to users or processes already on the host. Machines already on 7.0.1.2 or later are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-29T20:17:31+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-51832","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-51832","severity":null,"published_at":"2026-10-29T20:17:31+00:00","modified_at":"2026-10-29T20:17:31+00:00","first_seen_at":"2026-10-29T20:26:51+00:00","fetched_at":"2026-10-29T20:26:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}