The vulnerability in the Windows builds of GNU Wget originates from a hard‑coded configuration path at C:\\msys64 that is writable by unprivileged users. An attacker who can write to that directory can alter the use_askpass setting in the configuration file to point to an arbitrary executable or script. When wget processes the configuration, it will execute the specified command, giving the attacker the ability to run code with the privileges of the current user. This flaw permits local privilege escalation because the code runs under the attacker’s user context and can be leveraged to compromise system resources.

Affected systems are Windows environments running GNU Wget for Windows sourced from eternallybored.org. No specific version numbers are provided, indicating that all Windows builds from the noted source that contain the hard‑coded path are potentially vulnerable.

The CVSS score of 7.8 reflects a high severity impact, while the EPSS score of <1% indicates a very low but non‑zero probability that the vulnerability will be exploited in the wild. The issue is not listed in the CISA KEV catalog, meaning it has not yet appeared as a widely used exploit. Based on the description, it is inferred that the attack requires local access to the file system and does not involve network interaction or the need for elevated privileges to start. Successful exploitation depends on the attacker’s ability to write to the C:\\msys64 directory and author a malicious use_askpass directive, after which the code runs with the user’s rights.