Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated files
The custom action behind WiX's RemoveFolderEx functionality could allow a standard user to delete protected directories.
Advisories for Nuget/WixToolset.Util.wixext package
2024