CVE-2026-94574

Name of the Vulnerable Software and Affected Versions GNU wget (Windows builds from eternallybored.org) (affected versions not specified)

Description A local cross-user code execution issue exists due to a hardcoded configuration file path at C:msys64 that can be written to by unprivileged users. This allows for arbitrary code execution through the use askpass directive, which may lead to local privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.