What’s Vulnerable › Vulnerabilities

CVE-2026-7006: Sublime Text 4192/3207 Local Privilege Escalation via Update Staging Mechanism

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-18 · updated 2026-09-22
• Weakness: CWE-494

Description

Sublime Text for Windows through Build 4192 (Sublime Text 4) and Build 3207 (Sublime Text 3) contains a local privilege escalation vulnerability that allows unprivileged local attackers to execute arbitrary code with elevated privileges by abusing the update staging mechanism. Attackers can place a malicious DLL in the user-writable staging directory under %LOCALAPPDATA%, mark it read-only to bypass cleanup, and have the elevated installer copy it into the protected installation directory, causing the DLL to execute in the context of any higher-privileged user who subsequently launches the application.

Affected products

• Sublime HQ Pty Ltd Sublime Text 3: 3207
• Sublime HQ Pty Ltd Sublime Text 4: 4192

References

• https://gist.github.com/anthok/765b3ca0223fabee38f51d8f832e2175
• https://www.sublimetext.com/
• https://www.vulncheck.com/advisories/sublime-text-4192-3207-local-privilege-escalation-via-update-staging-mechanism

Get alerted when CVE-2026-7006 or the next vulnerability affects your stack