CyberRota Analysis
AI-GeneratedBleachBit versions prior to 6.0.1 on Windows are vulnerable to a local privilege escalation flaw that allows unprivileged users to exploit improper directory handling during file deletion. By leveraging this vulnerability, attackers can redirect elevated deletion operations to arbitrary files, potentially gaining local SYSTEM privileges. Organizations using affected versions should prioritize upgrading to 6.0.1 to mitigate the risk of unauthorized access and data loss.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
BleachBit cleans files to free disk space and to maintain privacy. Prior to 6.0.1, privileged Windows cleaning does not lock and validate a target's parent directory before deletion. A local unprivileged user can replace that directory with a Windows junction and use a native symlink to redirect the elevated deletion to an attacker-selected file. The arbitrary privileged file deletion can be combined with Windows Installer behavior to obtain local SYSTEM privileges. This issue is fixed in version 6.0.1.