CVE-2026-12201 describes a permission issue in the DLL Handler component of IObit Malware Fighter versions 13.0, 13.1, and 13.2.0. The vulnerability requires local access and involves manipulation that leads to improper permission handling. Although an exploit has been published, there is no vendor response or official remediation available at this time. The CVSS 4.0 vector indicates low attack complexity and privileges required, with no user interaction needed.

The vulnerability allows a local attacker to manipulate permissions within the affected component, potentially leading to unauthorized actions or privilege escalation within the local system context. The medium severity and CVSS score of 4.8 reflect a moderate risk that could impact system security if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should limit local access to trusted users only and monitor for updates from the vendor regarding a patch or mitigation.