CVE-2023-49797

CVE-2023-49797 is a high-severity vulnerability affecting PyInstaller-built Python applications, specifically those incorporating matplotlib or win32com, that run with elevated privileges. An unprivileged attacker can exploit a race condition or directory junction weakness (in older Python versions) to delete arbitrary files if the temporary directory is not securely configured. The vulnerability has a CVSS score of 7.8 (HIGH) due to its low attack complexity and potential for high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.