CVE-2026-33430

CVE-2026-33430 describes a vulnerability in Briefcase versions 0.3.0 through 0.3.25, where Windows MSI installers generated for per-machine installations create directories with insecure permissions. This flaw allows a low-privilege authenticated user to modify or replace application binaries, potentially leading to privilege escalation if an administrator subsequently executes the altered software. The vulnerability is rated High severity (CVSS 7.3), requiring local access and user interaction for exploitation. There is currently no evidence of active exploitation, no public exploit code available, and minimal community discussion surrounding this CVE. Organizations are advised to update Briefcase to version 0.3.26 or later, or apply the provided patch to existing .wxs files.