Bytello Share (Windows Edition) installer loads dynamic link libraries from the directory it is run in. If an attacker places a malicious DLL in that same folder before launching the installer, the DLL is loaded and its code executed with the privileges of the user running the installer. This flaw allows attackers to run arbitrary code with local user privileges, potentially compromising the system. The weakness is classified as insecure DLL search order (CWE-427).

The vulnerability affects Bytello Share Windows Edition installer executables distributed by Bytello. No specific version range is provided in the advisory, so all supplied installers made available at the time of this note are considered potentially affected.

The CVSS base score of 8.4 marks it as high‑severity, and no EPSS score is reported. It is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attacker’s ability to supply a DLL in the installer’s run directory allows the installer to load it, executing code with the installing user’s privileges. This effectively means the attack vector is local file placement, and the attacker only needs write access to the installation folder and enough local privileges to run the installer. The breadth of impact depends on the installing user’s rights; administrators who install the product pose the highest risk within an organization.