Unquoted Search Path Vulnerability in Punto Switcher by Yandex

CVE-2026-25865

What is CVE-2026-25865?

Punto Switcher versions up to 4.5.0.583 are susceptible to an unquoted search path element vulnerability that permits local attackers to execute arbitrary code. This arises from the application calling WinExec without a fully qualified path for RunDll32.exe, particularly when invoking shell32.dll Control_RunDLL input.dll. By placing a malicious executable earlier in the search order, attackers can exploit this flaw to gain execution capabilities in the context of the affected user.

References