CVE-2026-55567
highBleachBit cleans files to free disk space and to maintain privacy.
BleachBit cleans files to free disk space and to maintain privacy. Prior to 6.0.1, privileged Windows cleaning does not lock and validate a target's parent directory before deletion. A local unprivileged user can replace that directory with a Windows junction and use a native symlink to redirect the elevated deletion to an attacker-selected file. The arbitrary privileged file deletion can be combined with Windows Installer behavior to obtain local SYSTEM privileges. This issue is fixed in version 6.0.1.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/bleachbit/bleachbit/commit/ee128238e92c7192f0c4d6406b1bd0cd9155e7e0 security-advisories@github.com
- https://github.com/bleachbit/bleachbit/pull/1774 security-advisories@github.com
- https://github.com/bleachbit/bleachbit/releases/tag/v6.0.1 security-advisories@github.com
- https://github.com/bleachbit/bleachbit/security/advisories/GHSA-vcjw-px28-5w94 security-advisories@github.com
- https://github.com/bleachbit/bleachbit/security/advisories/GHSA-vcjw-px28-5w94 134c704f-9b21-4f2e-91b3-4a467353bcc0