CVE-2026-30332

Published: Apr 02, 2026 Last Modified: Apr 02, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,5
Source: [email protected]
Attack Vector: local
Attack Complexity: high
Privileges Required: low
User Interaction: required
Scope: changed
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows attackers to escalate privileges and execute arbitrary code via replacing a legitimate script with a crafted payload during the flashing process.

https://github.com/B1tBreaker/CVE-2026-30332
https://github.com/B1tBreaker/CVE-2026-30332
https://github.com/balena-io/etcher/issues/4500
https://github.com/balena-io/etcher/issues/4500
https://www.balena.io/security
https://www.balena.io/security