This vulnerability involves the lack of integrity checks on code downloaded or staged during the update process of Sublime Text on Windows. Specifically, unprivileged users can abuse the update staging directory under %LOCALAPPDATA% by placing a malicious DLL and marking it read-only to prevent removal. The elevated installer subsequently copies this DLL into a protected directory, leading to execution of arbitrary code with elevated privileges when the application is run by a higher-privileged user. This is a local privilege escalation vulnerability affecting Sublime Text 4 Build 4192 and Sublime Text 3 Build 3207.

Successful exploitation allows an unprivileged local attacker to execute arbitrary code with elevated privileges on the affected system. This can lead to full system compromise under the context of a higher-privileged user. The vulnerability does not require network access and relies on local access to the machine.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local user access to the staging directory under %LOCALAPPDATA% and monitor for unauthorized DLL files. Avoid running Sublime Text with elevated privileges unnecessarily.