This vulnerability in Glarysoft Glary Utilities allows a local attacker who already has low-privileged code execution to escalate privileges to SYSTEM by exploiting a flaw in the Disk Clean functionality. The attacker can create a junction point to trick the service into deleting arbitrary files, enabling execution of arbitrary code with SYSTEM privileges. The vulnerability was responsibly disclosed to the vendor in May 2025, with public advisory release in July 2026. No patch or remediation has been confirmed by the vendor. The only recommended mitigation is to restrict use of the affected product.

Successful exploitation results in local privilege escalation from a low-privileged user to SYSTEM level, allowing full control over the affected system. Confidentiality, integrity, and availability impacts are all rated high due to the ability to execute arbitrary code as SYSTEM. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Given the nature of the vulnerability, the only practical mitigation is to restrict interaction with Glarysoft Glary Utilities until a fix is available.