Privilege Escalation Vulnerability in InstallShield by Revenera

CVE-2026-4869

What is CVE-2026-4869?

A potential privilege escalation vulnerability exists in InstallShield versions up to 2025 R2 when executing a compressed Basic MSI setup with prerequisites sourced from an unsecured location. If a local administrator executes Setup.exe from this insecure directory, prerequisite installers may also be fetched from the same insecure source, increasing the risk of privilege escalation attacks. To mitigate this issue, it is crucial to ensure that all setup files and prerequisites are sourced from secure locations.

References