A problematic issue has been found in Postman on Windows, affecting an unknown part of the library file profapi.dll. The manipulation leads to an untrusted search path. The attack must be approached locally and has a rather high complexity, with difficult exploitability. The vendor was contacted about this disclosure but did not respond.