Flexera InstallShield 2025 R2 Potential Privilege Escalation via Insecure Directory Loading (CVE-2026-4869)

Vulnerability Overview CVE ID: CVE-2026-4869 Vulnerability Type: Potential Privilege Escalation Description: In InstallShield 2025 R2 and earlier versions, there is a potential privilege escalation issue when running compressed Basic MSI installers from non-secure directories. If a local administrator launches a compressed Setup.exe from an insecure location, the prerequisite installer may also load from an insecure location, potentially leading to privilege escalation. Affected Scope Affected Versions: InstallShield 2025 R2 and earlier versions Trigger Conditions: Running compressed Basic MSI installers from non-secure directories Remediation Recommended Measures: Follow security best practices by avoiding the execution of installers, particularly those requiring administrative privileges, from non-secure or untrusted directories. Patch Information: Patches for InstallShield 2025 R2 are available for download from the Product and License Center. Patches for supported versions of InstallShield (2024 R2 and 2023 R2) will be available on the Product and License Center tomorrow. Additional Information Acknowledgments: Thanks to Sandeep Kumar Singh (AMD) for identifying and disclosing this vulnerability. Related Vulnerabilities CVE-2023-29080: Security patch addressing possible privilege escalation scenarios identified in InstallShield CVE-2024-7562: Privilege Escalation Vulnerability in Created MSI Packages CVE-2024-3310: Privilege Escalation Vulnerability During MSI Repair The InstallAnywhere was created with Unlicensed version: Installers created using an unlicensed version of InstallAnywhere CVE-2024-2658: FlexNet Publisher potential local privilege escalation issue Page Footer Information Contact Information: - Phone: +1.800.374.4353 - Website: REVERERA.COM, FLEXERA.COM Social Media: LinkedIn, Twitter, YouTube, Instagram Copyright: © 2026 Flexera Software. All Rights Reserved. Links: Privacy policy, Terms and conditions, Flexera Community, Contact Us Page Interaction Feedback: Was this helpful? (YES/NO) Support: Ask A Question Files File List: No specific files listed Visibility URL Name: CVE-2026-4869-Potential-Privilege-Escalation-in-InstallShield-2025-R2-running-Setup-Prerequisites-from-an-Insecure-directory Subscription Subscribe Button: SUBSCRIBE Settings Cookie Settings: COOKIE SETTINGS Support Center Support Center Link: SUPPORT HUB Navigation Bar Navigation Options: Get Started, Products, Resources, Support, More Login/Register Login/Register Button: Login/Join Footer Copyright: © 2026 Flexera Software. All Rights Reserved. Links: Privacy policy, Terms and conditions, Flexera Community, Contact Us Social Media Social Media Icons: LinkedIn, Twitter, YouTube, Instagram Contact Information Phone: +1.800.374.4353 Website: REVERERA.COM, FLEXERA.COM Other Files: No specific files listed Visibility: Guest URL Name: CVE-2026-4869-Potential-Privilege-Escalation-in-InstallShield-2025-R2-running-Setup-Prerequisites-from-an-Insecure-directory Related Vulnerabilities CVE-2023-29080: Security patch for the possible privileged escalation scenarios identified in InstallShield CVE-2024-7562: Privilege Escalation Vulnerability in Created MSI Packages CVE-2024-3310: Privilege Escalation Vulnerability During MSI Repair The InstallAnywhere was created with Unlicensed version: The InstallAnywhere was created with Unlicensed version CVE-2024-2658: FlexNet Publisher potential local privilege escalation issue Page Interaction Feedback: Was this helpful? YES/NO Support: Ask A Question Subscription Subscribe Button: SUBSCRIBE Settings Cookie Settings: COOKIE SETTINGS Support Center Support Center Link: SUPPORT HUB Navigation Bar Navigation Options: Get Started, Products, Resources, Support, More Login/Register Login/Register Button: Login/Join Footer Copyright: © 2026 Flexera Software. All Rights Reserved. Links: Privacy policy, Terms and conditions, Flexera Community, Contact Us Social Media Social Media Icons: LinkedIn, Twitter, YouTube, Instagram Contact Information Phone: +1.800.374.4353 Website: REVERERA.COM, FLEXERA.COM Other Files: No specific files listed Visibility: Guest URL Name: CVE-2026-4869-Potential-Privilege-Escalation-in-InstallShield-2025-R2-running-Setup-Prerequisites-from-an-Insecure-directory Related Vulnerabilities CVE-2023-29080: Security patch for the possible privileged escalation scenarios identified in InstallShield CVE-2024-7562: Privilege Escalation Vulnerability in Created MSI Packages CVE-2024-3310: Privilege Escalation Vulnerability During MSI Repair The InstallAnywhere was created with Unlicensed version: The InstallAnywhere was created with Unlicensed version CVE-2024-2658: FlexNet Publisher potential local privilege escalation issue Page Interaction Feedback: Was this helpful? YES/NO Support: Ask A Question Subscription Subscribe Button: SUBSCRIBE Settings Cookie Settings: COOKIE SETTINGS Support Center Support Center Link: SUPPORT HUB Navigation Bar Navigation Options: Get Started, Product

Goal Reached Thanks to every supporter — we hit 100%!

Flexera InstallShield 2025 R2 Potential Privilege Escalation via Insecure Directory Loading (CVE-2026-4869)