Trend Cleaner One Pro: Cleanup Service Turned Weapon for…

ZDI-26-496 reveals a vulnerability in Cleaner One Pro's Junk Files Cleanup service that allows a local attacker to delete arbitrary files with SYSTEM privileges.

The ZDI-26-496 advisory, published July 29, 2026, discloses a vulnerability in the consumer product Trend AI Cleaner One Pro that turns a routine maintenance service into an attack surface for file destruction. The flaw lets an attacker with low-privilege code execution coerce the program into deleting arbitrary files in the SYSTEM context — the highest privilege level on Windows. TrendLife has released a corrective update, but the episode reignites debate over the security of mass-installed optimization software on consumer endpoints.

Key Takeaways

The vulnerability is identified as CVE-2026-62660 with a CVSS score of 5.6 per ZDI.
The flaw resides in the Junk Files Cleanup functionality of Trend AI Cleaner One Pro, formerly known as TrendLife Cleaner One Pro.
A local attacker with low-privilege code execution creates a junction to redirect the service toward files to be deleted outside the intended directory.
Deletion occurs with SYSTEM privileges, enabling removal of critical system files, logs, or security components.

The Mechanism: When File Cleanup Meets Link Following

The vulnerability hides in an apparently innocuous feature. Cleaner One Pro's Junk Files Cleanup service operates with elevated privileges to remove temporary files, caches, and installation leftovers. According to the ZDI advisory, the specific flaw allows an attacker to create a junction — an NTFS file system junction point — to manipulate the path resolved by the service.

The service, trusting the expected directory structure, follows the redirection and applies the deletion operation to arbitrary files designated by the attacker. Because the process runs with SYSTEM credentials, the deletion bypasses normal access protections. This attack pattern, known as link following and cataloged as CWE-59, recurs in high-privilege services that do not adequately validate paths before execution.

"By creating a junction, an attacker can abuse the service to delete arbitrary files. An attacker can leverage this vulnerability to delete files in the context of SYSTEM." — Advisory ZDI-26-496

The local nature of the vulnerability — requiring low-privilege code execution on the target machine — does not diminish its danger in real-world scenarios. Malware already present with limited user permissions, or an attacker who has compromised a non-administrative account, can exploit this flaw to dismantle system defenses from the inside: deleting antivirus definitions, audit logs, or critical configuration files.

From TrendLife to Trend AI: The Product Journey and Disclosure Handling

The affected product is identified as Trend AI Cleaner One Pro, the evolution of the previous TrendLife Cleaner One Pro. This branding distinction matters: TrendLife is the direct vendor entity, not Trend Micro, which appears in linked sources only for corporate context and the Vision One platform. The ZDI advisory explicitly attributes the patch to TrendLife, clarifying the chain of responsibility.

The coordinated disclosure timeline reveals a four-month path. The vulnerability was reported to the vendor on March 31, 2026; the public advisory was released July 29, 2026. This interval aligns with development and test cycles for consumer software, but leaves open questions about risk management during the pre-patch window — especially for a product deployed to millions of endpoints.

The CVSS 5.6 score, assigned by ZDI, rates the vulnerability as medium severity. The metric reflects the need for local access and attack complexity, but potentially understates the systemic impact when the flaw is chained in a compromise. The source does not provide the full CVSS vector, limiting quantitative risk analysis.

What to Do Now

For users who have Cleaner One Pro installed, the update released by TrendLife is the priority measure. The update procedure should occur through the product's automatic channels or via the vendor's official site. The source does not specify affected versions or alternative distribution methods.

Verifying the software's presence on corporate endpoints falls under asset management controls, since consumer optimization products are often installed independently by users. The source documents no temporary workarounds beyond the official patch.

Monitoring anomalous file deletion events by processes with SYSTEM privileges can reveal exploitation attempts. The source does not indicate specific IoCs (indicators of compromise) for this vulnerability.

Uninstalling the product pending the update is a context-dependent assessment: the source neither explicitly recommends nor rules it out.

Why System Cleaners Remain an Underestimated Attack Surface

System optimization software occupies an ambivalent position in the security landscape. On one hand, they require elevated privileges to function — deleting protected files, modifying the registry, terminating processes. On the other, they are distributed as consumer utilities with minimal visibility for IT teams and scant attention from security researchers compared to enterprise products.

The ZDI-26-496 advisory confirms this category warrants scrutiny. A file cleanup service that does not validate paths against junctions represents an ideal vehicle for controlled destruction: silent, with apparently legitimate cover, and with maximum impact thanks to SYSTEM privileges. The ability to delete arbitrary files is not merely a denial of service, but can set the stage for broader compromise — wiping traces, disabling protections, or corrupting critical components.

The fact that ZDI tracked and coordinated this disclosure signals growing attention to this surface. However, the available documentation has significant gaps: specific software versions are not listed, nor are technical patch details or methods to verify its application. The discoverer's identity is not mentioned, and no infrastructure overlaps with other campaigns or known actors emerge.

For organizations, the case raises governance questions: consumer maintenance products often fly under software policy radar, yet introduce SYSTEM privileges on endpoints that access corporate data. The line between useful cleanup tool and destruction vehicle is thinner than user reviews suggest.

Frequently Asked Questions

Can the vulnerability be exploited remotely?

No. The ZDI advisory explicitly states the attacker must first obtain the ability to execute low-privilege code on the target system. The vulnerability is local by definition.

Which Cleaner One Pro versions are affected?

The ZDI advisory does not list specific versions. The source generically indicates "affected installations of TrendLife Cleaner One Pro" without qualifying the range. Users should verify update availability through the product's official channels.

Is there evidence of active in-the-wild exploitation?

The dossier documents no in-the-wild exploits or attack campaigns associated with this vulnerability. The coordinated disclosure with an available patch reduces the exposure window, but does not rule out future exploitation.

Sources

Information verified against cited sources and current as of publication.

Sources

Sources and references