From d6adda6935395e4bb30aede50f653a1f1dfecc78 Mon Sep 17 00:00:00 2001 From: michalwyszynski93 Date: Mon, 31 Aug 2026 16:31:04 +0200 Subject: [PATCH 1/2] system dir in path --- examples/custom_nsis_template/custom.nsi.tmpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/examples/custom_nsis_template/custom.nsi.tmpl b/examples/custom_nsis_template/custom.nsi.tmpl index 1ed5b41f3..c8cf47606 100644 --- a/examples/custom_nsis_template/custom.nsi.tmpl +++ b/examples/custom_nsis_template/custom.nsi.tmpl @@ -675,7 +675,7 @@ Section "Uninstall" !insertmacro AbortRetryNSExecWaitLibNsisCmd "rmreg" DetailPrint "Removing files and folders..." - nsExec::Exec 'cmd.exe /D /C RMDIR /Q /S "$INSTDIR"' + nsExec::Exec '"$SYSDIR\cmd.exe" /D /C RMDIR /Q /S "$INSTDIR"' # In case the last command fails, run the slow method to remove leftover RMDir /r /REBOOTOK "$INSTDIR" From eb9081b1557d56fb8690d1b699b7ab5830a00452 Mon Sep 17 00:00:00 2001 From: michalwyszynski93 Date: Mon, 31 Aug 2026 16:53:34 +0200 Subject: [PATCH 2/2] news template --- news/TEMPLATE | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/news/TEMPLATE b/news/TEMPLATE index c09f3e9a4..c90ee6f38 100644 --- a/news/TEMPLATE +++ b/news/TEMPLATE @@ -4,7 +4,7 @@ ### Bug fixes -* +* Mitigated a CWE-426 untrusted search path vulnerability in the example `custom.nsi.tmpl` by using a fully qualified path to `$SYSDIR\cmd.exe`. ### Deprecations