Local Privilege Escalation Vulnerability in Affected Product by Vendor

CVE-2026-44469

What is CVE-2026-44469?

The affected product improperly manages the permissions of files extracted to a temporary directory during administrative installation. This flaw allows a low-privileged local attacker to exploit a Time-of-Check to Time-of-Use (TOCTOU) race condition. By doing so, the attacker can replace legitimate files with malicious versions within a narrow window of time before installation, potentially leading to local privilege escalation.

References