Arbitrary Code Execution in Maltego Windows Installer

Executive Summary

CVE-2026-107090 is a vulnerability in Maltego Windows Installer version 4.13.0 involving executable search-path hijacking. The installer may resolve and execute msiexec.exe through an unsafe mechanism, allowing a local attacker to influence executable execution if they control a directory searched before the legitimate Windows executable.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor for unusual executable resolution paths during Maltego installer execution. Use Microsoft Process Monitor to track msiexec.exe execution attempts and verify if they originate from untrusted directories. Check system PATH environment variable for suspicious entries that could hijack executable resolution.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow a local attacker to execute arbitrary code, potentially leading to unauthorized access, modification of files, or disruption of system operations. Privilege escalation would require further validation.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update Maltego Windows Installer to the latest version if available. Avoid installing Maltego in directories with write permissions for untrusted users. Use explicit, full paths for executable resolution in scripts and processes. Review and clean the system PATH variable to remove suspicious entries.

Useful 0 Not Useful 0