The vulnerability identified as CVE-2026-13133 affects LINE for Windows versions before 26.4.0. It involves an insecure DLL loading mechanism (CWE-427) in the LineInst.exe installer, where Msftedit.dll is loaded via a relative path. This allows an attacker to place a malicious DLL in the installer's directory, which will be loaded ahead of the legitimate System32 DLL, potentially enabling code execution or other malicious actions. The CVSS 4.0 score is 8.4, indicating high severity with local attack vector, low complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no official remediation or patch has been announced by LY Corporation as of the publication date.

If exploited, this vulnerability could allow an attacker with local access to execute arbitrary code with the privileges of the user running the installer. The malicious DLL could compromise confidentiality, integrity, and availability of the affected system. However, exploitation requires local access and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid running installers from untrusted directories and ensure the installation directory is secure from unauthorized modification.