What’s Vulnerable › Vulnerabilities

CVE-2026-55567: BleachBit: Exploit File Delete to Escalate Privilege

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-21 · updated 2026-09-24
• Weakness: CWE-367

Description

BleachBit cleans files to free disk space and to maintain privacy. Prior to 6.0.1, privileged Windows cleaning does not lock and validate a target's parent directory before deletion. A local unprivileged user can replace that directory with a Windows junction and use a native symlink to redirect the elevated deletion to an attacker-selected file. The arbitrary privileged file deletion can be combined with Windows Installer behavior to obtain local SYSTEM privileges. This issue is fixed in version 6.0.1.

Affected products

• bleachbit: before 6.0.1

References

• https://github.com/bleachbit/bleachbit/commit/ee128238e92c7192f0c4d6406b1bd0cd9155e7e0
• https://github.com/bleachbit/bleachbit/pull/1774
• https://github.com/bleachbit/bleachbit/releases/tag/v6.0.1
• https://github.com/bleachbit/bleachbit/security/advisories/GHSA-vcjw-px28-5w94
• https://github.com/bleachbit/bleachbit/security/advisories/GHSA-vcjw-px28-5w94

Get alerted when CVE-2026-55567 or the next vulnerability affects your stack