Description (CNA)
A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows attackers to escalate privileges and execute arbitrary code via replacing a legitimate script with a crafted payload during the flashing process.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/balena-io/etcher/issues/4500
- https://www.balena.io/security
- https://github.com/B1tBreaker/CVE-2026-30332
ADP enrichment
No English description supplied.
No references supplied.