Security context

Highlights

Privilege Escalation: 2 prior fixes. Scrutinize any change in this area.

&: most-fixed (1 issue). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Path Traversal: Elevated execution of MSI custom installer actions makes the system vulnerable to local privilege escalation if the installer performs file operations on user-controlled paths containing symbolic links or junction points. Attackers can leverage these actions to delete or modify privileged files.

Privilege Escalation: Workflows running with default write permissions can be exploited by compromised dependencies or malicious pull requests. Restricting permissions at the workflow and job level to the absolute minimum necessary reduces the blast radius of a runner compromise.

Insecure Third-Party Dependency: Downloading critical tools like CMake over the network during arm64 builds without SHA-256 integrity validation exposes the compilation pipeline to potential man-in-the-middle attacks or third-party registry compromise.