The vulnerability is exposed in the Disk Clean component of Glary Utilities. An attacker who has already obtained local code execution can craft a junction and trigger the. This path traversal flaw (CWE‑59) allows the attacker to gain SYSTEM privileges and execute code in the system context.

All installations of Glarysoft Glary Utilities that include the Disk Clean feature and have not applied the vendor‑issued fix are vulnerable. The specific version range is not disclosed, so any unpatched copy remains at risk.

The CVSS score of 7.3 indicates a high severity local privilege escalation, while the EPSS score of < 1% signals a very low likelihood of exploitation in the wild. The flaw requires an initial local foothold; with that, an attacker can create the junction, invoke Disk Clean, and elevate privileges to system. The vulnerability is not listed in CISA KEV, but enterprise defenses such as disabling Disk Clean or restricting junction creation mitigate the risk.