Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking.
CVSS 4.0MEDIUM 4.7·Local·Low privileges·User interaction·EPSS 0.00184·Published 2026-03-31·Fixed in 1.1.3363CWE-427