🎯 New Report #3619409: Windows installer grants low-privileged users write access to executable P2Pool directory, enabling local code execution
🔺Severity: High
👽 Reporter: qttps
⭐️ Reputation: 130
🛠 State: resolved
💼 Team: Monero
💵 Bounty: null
🕐 Submitted: 2026-03-21
⏰ Disclosed: 2026-08-20 23:47:52
📝 Summary: A Windows installer for the Monero GUI wallet created a subdirectory for P2Pool with overly broad write permissions for low-privileged users. The GUI later executed the p2pool.exe binary from that directory without any additional integrity checks, allowing a local attacker to plant malicious code that would be executed by the GUI.
📂 Report JSON File: 3619409
@hackeronereports