CVE-2026-22561: Medium severity Anthropic Claude for Windows (Claude Setup.exe installer) vulnerability
Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs (e.g., profapi.dll) from its own directory after UAC elevation, enabling arbitrary code execution if a malicious DLL is planted alongside the installer.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Anthropic Claude for Windows installer (Claude Setup.exe)to a version that resolves this vulnerability.Fixed in 1.1.3363 - Compensating control
Ensure the installer directory is protected so that untrusted users cannot plant or modify DLLs alongside the elevated installer (e.g., profapi.dll), preventing DLL search-order hijacking after UAC elevation.