CVE-2023-39520

CVE-2023-39520 is a local privilege escalation vulnerability affecting Cryptomator version 1.9.2, where the MSI installer's repair function can be abused by low-privileged users. This vulnerability has a CVSS score of 7.8 (High), indicating that an attacker with local access can achieve high confidentiality, integrity, and availability impacts with low attack complexity. While there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, a fix is available in Cryptomator version 1.9.3, and a workaround involves adding the -NoProfile parameter to PowerShell commands.