CVE-2026-107707 [HIGH] – Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in it

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file’s directory with a junction to C:Config.msi and abuse Windows Installer rollback to execute code as SYSTEM.