CVE-2026-86938: Claris FileMaker Pro vulnerability
A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malicious DLL file in the installer directory. This vulnerability is addressed in FileMaker Pro version 26.0.3.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FileMaker Proto a version that resolves this vulnerability.Fixed in 26.0.3
Event History
Frequently Asked Questions
Who can exploit this issue?
A local user who can place a malicious DLL in the FileMaker Pro installer directory can exploit the issue. The attacker must be able to influence files in that directory before the installer is run.
What level of access could an attacker obtain?
Successful exploitation can result in arbitrary code execution with elevated administrator privileges.
Is a patched version available?
Yes. The issue is addressed in FileMaker Pro version 26.0.3.
What can be done until the installer is updated?
Restrict write access to the FileMaker Pro installer directory and ensure untrusted users cannot place DLL files alongside the installer.