Skip to content

SysManager 1.20.57

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Jun 08:01
· 954 commits to main since this release
v1.20.57
e454b22
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[1.20.57] - 2026-06-24

Security

  • The Uninstaller no longer runs a per-user app's uninstaller from a user-writable folder while elevated. When SysManager ran as Administrator, uninstalling a local app executed the path from its registry UninstallString (and any DLL a rundll32 command would load). That path was trusted even when it pointed inside %LocalAppData%, which a standard user can write to — and the uninstall key in HKCU is also user-writable. An unprivileged attacker could therefore plant a binary there plus a fake uninstall entry, then have an elevated SysManager run it with admin rights (local privilege escalation). Admin-protected locations (Program Files, Windows, ProgramData) stay trusted as before; the per-user location is now trusted only when SysManager is not elevated, so normal per-user uninstalls (e.g. VS Code, Discord) are unaffected.

Verify the download

Get-FileHash .\SysManager-v1.20.57.exe -Algorithm SHA256

Expected SHA256: 1CFDA9E447A98344FF750B08D5625C8175CE90670B684FF35B6B3A89A688DA6A

Assets 4
Loading