CVE-2025-15595

This vulnerability allows an attacker to gain higher privileges on a system by tricking it into loading a malicious file instead of a legitimate one when using Inno Setup version 6.2.1 or earlier. To exploit this, the attacker needs access to the same directory as the Inno Setup application, making it crucial for users to ensure their environments are secure from unauthorized access.