Wine ships a .desktop file that registers itself as a MIME handler for EXE and other Windows executable types. When a user opens an EXE file, the handler blindly executes it with the current user’s privileges. This flaw permits an attacker to run arbitrary code with those privileges and escape the containment of Flatpak and Snap sandboxes, effectively bypassing container security.

The vulnerability affects any installation of Wine distributed by WineHQ. Because the .desktop file is included in the standard package, all systems that install the default Wine package are potentially impacted. No specific version numbers are listed, but the flaw exists in any Wine release that ships the described file.

The CVSS score is 7.3, indicating a high severity vulnerability. The EPSS score is not available, and the flaw is not yet listed in CISA KEV, suggesting limited evidence of widespread exploitation at this time. The attack vector is local; a user or process that can trigger the MIME handler can execute a malicious EXE, potentially leading to sandbox escape. The lack of a patch means the only immediate resolution is to remove the MIME handler.