The issue is related to the use of an unreliable path search in the WiX Toolset, which can be exploited through DLL redirection attacks. This allows an attacker to escalate privileges. The vulnerability impacts any installer built with the WiX installer framework. The .be TEMP folder is specifically vulnerable to these attacks. When the burn engine elevates, a malicious DLL can receive elevated privileges if placed in the correct location, such as the .be/<bundle>.Local folder. The exploitation involves monitoring the user's TEMP folder for changes and dropping a malicious DLL into this folder.