CVE-2026-22561

Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via…

Medium · published March 31, 2026

CVSS v4.0
4.7
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs (e.g., profapi.dll) from its own directory after UAC elevation, enabling arbitrary code execution if a malicious DLL is planted alongside the installer.

The record
Technical detail
CVSS v4.0
4.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
EPSS
0.00177 · 6.9th percentile
Published
2026-03-31T15:30Z
EPSS history
Timeline
  • 31 MAR 15:30Z
    Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via…
    cvelistv5