Local Privilege Escalation in pyinstaller on Windows

CVE-2023-49797

What is CVE-2023-49797?

A vulnerability in PyInstaller allows an unprivileged attacker to exploit applications that run as privileged processes, leading to unauthorized file deletion. This issue arises primarily when applications using libraries like matplotlib or win32com are executed with elevated permissions while the user's temporary directory is not securely locked. Attackers can potentially substitute a temporary file with a symlink between safety checks and file deletion actions, especially in versions of Python 3.7.x or earlier where Directory Junctions links are not safeguarded. Users are urged to upgrade to PyInstaller version 5.13.1 or higher to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References