CVE-2026-107707

Summary

A local unprivileged user can exploit a link following vulnerability in Intego Antivirus's optimization module to delete arbitrary folders as SYSTEM by replacing a scanned file's directory with a junction to C:\Config.msi and leveraging Windows Installer rollback functionality.

Exploitability

Exploitation requires local access and involves creating a junction point that triggers Windows Installer rollback, making it moderately difficult but possible for attackers with low privileges.

Blast radius

If exploited, this vulnerability could allow attackers to delete critical system folders and potentially execute arbitrary code as SYSTEM, affecting all Windows systems running Intego Antivirus 3.0.0.1 or earlier.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 3.0.0.2 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.