Local Privilege Escalation in Sublime Text for Windows

CVE-2026-7006

What is CVE-2026-7006?

Sublime Text for Windows, specifically versions 4 (Build 4192) and 3 (Build 3207), is prone to a local privilege escalation vulnerability. This flaw allows an unprivileged local attacker to execute arbitrary code with elevated privileges. The exploit takes advantage of the update staging mechanism where attackers can place a malicious DLL file in the user-writable staging directory under %LOCALAPPDATA%. By marking this file as read-only, attackers can bypass cleanup processes, leading the elevated installer to copy it into the protected installation directory. Consequently, the malicious DLL executes in the context of any higher-privileged user who launches the application.

References