CVE-2026-62660 is a local privilege abuse vulnerability in Trend Micro Cleaner One Pro's Junk Files Cleanup feature. An attacker who can execute low-privileged code on the target system can create a junction to trick the service into deleting arbitrary files with SYSTEM-level permissions. This vulnerability enables file deletion beyond the attacker's normal privileges. Trend Micro has released an update to fix this issue.

Exploitation allows an attacker with low-privileged code execution to delete arbitrary files on the affected system with SYSTEM privileges, potentially disrupting system operations or deleting critical files. There is no confidentiality impact reported. The integrity impact is limited to file deletion. Availability impact is high due to potential deletion of important files.

Trend Micro has issued an official update that corrects this vulnerability. Applying the vendor's update is the recommended remediation. No additional mitigation steps are specified or required beyond installing the update.