Local Privilege Escalation Vulnerability in Metalama by Metalama Technologies

CVE-2026-62847

What is CVE-2026-62847?

Metalama, a Roslyn-based open-source architecture toolkit for C#, contains a vulnerability allowing local unprivileged users on shared systems to exploit predictable temporary directories for loading malicious DLLs. This occurs in versions prior to 2025.1.18, 2026.0.25, and 2026.1.19. By planting a malicious DLL and leveraging the trust of sentinel files, affected users can escalate privileges, access sensitive source data, tamper with build outputs, or disrupt the build process. It's important to note that this issue does not affect default Windows temporary directories. Users are advised to upgrade to the fixed versions to safeguard against this vulnerability.

References